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Abstract 

Plausibility models are Kripke models that agents use to reason about knowledge 
and belief, both of themselves and of each other. Such models are used to interpret the 
notions of conditional belief, degrees of belief, and safe belief. The logic of conditional 
belief contains that modality and also the knowledge modality, and similarly for the logic 
of degrees of belief and the logic of safe belief. With respect to these logics, plausibility 
models may contain too much information. A proper notion of bisimulation is required 
that characterises them. We define that notion of bisimulation and prove the required 
characterisations: on the class of image-finite and preimage-finite models (with respect to 
the plausibility relation), two pointed Kripke models are modally equivalent in either of 
the three logics, if and only if they are bisimilar. As a result, the information content of 
such a model can be similarly expressed in the logic of conditional belief, or the logic of 
degrees of belief, or that of safe belief. This, we found a surprising result. Still, that does 
not mean that the logics are equally expressive: the logics of conditional and degrees of 
belief are incomparable, the logics of degrees of belief and safe belief are incomparable, 
while the logic of safe belief is more expressive than the logic of conditional belief. In 
view of the result on bisimulation characterisation, this is an equally surprising result. 
We hope our insights may contribute to the growing community of formal epistemology 
and on the relation between qualitative and quantitative modelling. 


1 Introduction 

A typical approach in belief revision involves preferential orders to express degrees of belief and 
knowledge 1201EZ]. This goes back to the ‘systems of spheres’ in [251116j . Dynamic doxastic 
logic was proposed and investigated in [28] in order to provide a link between the (non-modal 
logical) belief revision and modal logics with explicit knowledge and belief operators. A 
similar approach was pursued in belief revision in dynamic epistemic logic [51136113210139I, 
that continues to develop strongly ESj. We focus on the proper notion of structural 
equivalence on models encoding knowledge and belief simultaneously. A prior investigation 
into that is m, which we relate our results to at the end of the paper. Our motivation is 
to find suitable structural notions to reduce the complexity of solving planning problems. 
Solutions to planning problems are sequences of actions, such as iterated belief revision. It is 
the dynamics of knowledge and belief that, after all, motivates our research. 

*DTU Compute, Technical University of Denmark, {mibi,tobo,mhje}@dtu.dk 

TORIA, CNRS / Universite de Lorraine, hans.van-ditmarsch@loria.fr 
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Figure 1: An arrow x —>■ y labelled by a means x >a y, agent a considers y at least as plausible 
as X. We use x >a y to mean x > a y and y x. Here W 2 >a xui, so wi is strictly more 
plausible than W 2 - Reflexive edges are omitted. Unlisted propositions are false. 


The semantics of belief depends on the structural properties of models. To relate the 
structural properties of models to a logical language we need a notion of structural similarity, 
known as bisimulation. A bisimulation relation relates a modal operator to an accessibility 
relation. Plausibility models do not have an accessibility relation as such but a plausibility 
relation. This induces a set of accessibility relations; the most plausible worlds are the 
accessible worlds for the modal belief operator; and the plausible worlds are the accessible 
worlds for the modal knowledge operator. But it contains much more information: to each 
modal operator of conditional belief (or of degree of belief) one can associate a possibly distinct 
accessibility relation.This raises the question of how to represent the bisimulation conditions 
succinctly. Can this be done by reference to the plausibility relation directly, instead of by 
reference to these, possibly many, induced accessibility relations? It is now rather interesting 
to observe that relative to the modalities of knowledge and belief, the plausibility relation is 
already in some way too rich. 

The plausibility model Ml on the left in Figured] consists of hve worlds. The proposition 
p is true in the top ones and false in the bottom ones. The reverse holds for q: true at the 
bottom and false at the top. The a relations in the model correspond to the plausibility order 
W3 >a W2 >a wi, interpreted such that the smaller of two elements in the order is the most 
plausible of the two. Further, everything that is comparable with the plausibility order is 
considered epistemically possible. Hence, the epistemic equivalence classes for agent a in 
are {wi,W 2 ,W 3 }, {w^} and {tcs}. We can then view the model as a standard multi-agent 55 
model plus an ordering on the epistemic possibilities. As wi is the most plausible world for 
a in the equivalence class {wi,W2,W3}, she will in W3 believe p and that b believes -<p A q. 
This works differently from the usual doxastic modal logic, where belief corresponds to the 
accessibility relation. In the logics of belief that we study, belief is what holds in the most 
plausible world(s) in an epistemic equivalence class. For a, the most plausible world in her 
equivalence class {wi,W2,W3} is wi, so a believes the same formulas in all of them. 

In W2 agent b knows p. If a is given the information that b does not consider q possible 
(that is, the information that neither wi nor W3 is the actual world), then a believes that b 
knows p - or conditional on K^^q, a believes K^p. Such a statement is an example of the logic 
of conditional belief defined in Section [3] In we write this statement as K^p. 

Now examine w^. We will show that wi and are modally equivalent for L^: they 
agree on all formulas of that language—no information expressible in distinguishes the 
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two worlds. This leads to the observation that no matter where we move in the plausibility 
ordering for a, modal equivalence is preserved. Similarly, we can move W 2 anywhere we like 
except making it more plausible than wi. If we did, then a would believe Kbp unconditionally, 
and the formulas true in the model would have been changed. 

It turns out that moving worlds about in the plausibility order can be done for all models, 
as long as we obey one (conceptually) simple rule: Grouping worlds into “modal equivalence 
classes” of worlds modally equivalent to each other, we are only required to preserve the 
ordering between the most plausible worlds in each modal equivalence class. Only the most 
plausible world in each class matters. 

Another crucial observation is that standard bisimulation in terms of >« does not give 
correspondence between bisimulation and modal equivalence. For instance, while wi and W 3 
are modally equivalent, they are not “standardly” bisimilar with respect to >a'. VJ3 has a 
>a-edge to a KbP world ( 1 ^ 2 ), whereas wi does not. Thus, the straightforward, standard 
definition of bisimulation does not work, because no modality in the language corresponds 
to the plausibility relation. Instead we have an infinite set of modalities corresponding to 
relations derived from the plausibility relation. One of the major contributions of this paper 
is a solution to exactly this problem. 

Making W 3 as plausible as wi and appropriately renaming worlds gets us Mr of Figure 
[TJ Here the modally equivalent worlds ui and U 3 are equally plausible, modally equivalent 
and standardly bisimilar. This third observation gives a sense of how we solve the problem 
generally. Rather than using >„ directly, our definition of bisimulation checks accessibility 
with respect to a relation derived from >„ and the bisimulation relation R itself. Post¬ 
poning details for later we just note that in the present example the derived relation for Mr is 
exactly the plausibility relation for Mr. This indicates what we later prove: This new derived 
relation reestablishes the correspondence between bisimilarity and modal equivalence. 

The model Me of Figure[T]is the bisimulation contraction of the right model using standard 
bisimilarity. It is the bisimulation contraction of both models with the bisimulation notion 
informally defined in the previous paragraph. In previous work on planning with single-agent 
plausibility models [2], finding contractions of plausibility models is needed for decidability 
and complexity results. In this paper we do this for the first time for multi-agent plausibility 
models, opening new vistas in applications of modal logic to automated planning. 

Overview of content In Section [2] we introduce plausibility models and the proper and 
novel notion of bisimulation on these models, and prove various properties of bisimulation. In 
Section [3] we define the three logics of conditional belief, degrees of belief, and safe belief, and 
provide some further historical background on these logics. In Section 0] we demonstrate that 
bisimilarity corresponds to logical equivalence (on image-finite and preimage-finite models) for 
all three core logics, so that, somewhat remarkably, one could say that the content of a given 
model can equally well be described in any of these logics. Then, in Section Owe determine 
the relative expressivity of the three logics, including more expressive combinations of their 
primitive modalities. The main result here is that the logics of conditional and degrees of belief 
are incomparable, and that the logics of degrees of belief and safe belief are incomparable, but 
that the logic of safe belief is (strictly) more expressive than the logic of conditional belief. In 
Section O we put our result in the perspective of other recent investigations, mainly the study 
by Lorenz Demey m, and in the perspective of possible applications: decidable planning. 
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2 Plausibility models and bisimulation 


A well-preorder on a set X is a reflexive and transitive binary relation > on X such that 
every non-empty subset has ^-minimal elements. The set of minimal elements (for of 
some y C X is the set Min^ Y defined as {y ^ Y \ y' > y for all y' € r}EI As any two- 
element subset Y = {x, y} of X also has minimal elements, we have that x \> y oi y > x. 
Thus all elements in X are ^-comparable. 

Given any binary relation R on X, we use to denote the reflexive, symmetric, and 
transitive closure of R (the equivalence closure of R). For any equivalence relation i? on X, 
we write for {x' € X | {x,x') € i?}. A binary relation i? on X is image-finite if and only 
if for every x G X, {x' G X | (x, x') G R} is finite. A relation is preimage-finite if and only if 
for every x G X, {x' G X | (x',x) G R} is finite. We say R is (pre)image-finite if it is both 
image-finite and preimage-finite. We often write xRy instead of (x, y) G R. Given subsets 
Y, Z C X, we define YRZ if and only if yRz for all y G T and all z £ Z. 

Definition 1 (Plausibility model). A plausibility model for a countably infinite set of propo¬ 
sitional symbols P and a finite set of agents A is a tuple M = {W, >,V), where 

• VF is a set of worlds called the domain, denoted D{M); 

• >: A —>■ P{W X W) is a function mapping each a £ A into a plausibility relation >(a), 
usually abbreviated >„. For each a G A and w £ W, >a is a well-preorder on the set 
{w' £W \w >aw' oi w' >a w}. Each >„ is required to be (pre)image-finite; 

• V :W ^ 2^ Is a valuation. 

For w £ W, (M, w) is a pointed plausibility model. 

^^w>aV then v is at least as plausible as w (for agent a), and the >a-minimal elements are 
the most plausible worlds. For the symmetric closure of >a we write ^a- this is an equivalence 
relation on W called the epistemic relation (for agent a). Y w >a v but v w we write 
w >a V {v is more plausible than w), and for w >a v and v >a w we write w zza v {w and v 
are equiplausible). Instead oi w >aV {w >a v) we may write v <a w {v <a w). 

Note that we have required each relation >a to be (pre)image-flnite. This amounts to 
requiring that all equivalence classes of ~a are finite, while still allowing infinite domains. 
This requirement is not part of the definition of plausibility models provided in [3. We 
require it here, since it leads to simplifications without any significant reduction in generality: 

1. We will show full correspondence between bisimilarity and modal equivalence for three 
different logics over plausibility models. As is the case in standard modal logic, this 
correspondence can only be achieved for (pre)image-finite models (the direction from 
modal equivalence to bisimilarity only hold for such models, see e.g. i). Simply as¬ 
suming (pre)image-finiteness from the outset simplifies the presentation, as we do not 
have to repeat this restriction in a large number of places. 

2. Some of our later results are going to rely on the existence of a largest autobisimulation 
(see below). Usually it is quite trivial to show the existence of a largest bisimulation, 

^This notion of minimality is non-standard and taken from [8]. Usually a minimal element of a set is an 
element that is not greater than any other element. 
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since the union of any set of bisimulations is a bisimulation. However, we need a non¬ 
standard notion of bisimulation for our purposes, and for such bisimulations closure 
under union is far from a trivial result H Given our first correspondence result between 
bisimilarity and modal equivalence, we are however going to get this result for free (see 
Section E]). 

We now proceed to define a notion of autobisimulation on a plausibility model. This notion 
is non-standard, because there is no one-to-one relation between the plausibility relation for 
an agent and a modality for that agent in the logics defined later. In the definition below (and 
from now on), we allow ourselves some further notational abbreviations. Let M = (W, >, V) 
denote a plausibility model. Let a G A and w G W, then we write [■(/;]„ instead of Now 

let Z C [tcja, then we write Miua Z instead of Min>^ Z. For any binary relation R on W, we 

write w v for Mina{[w]R= n [tc]a) >a Mina{[v]R= n [u]a). When w v and v w, we 
write w v. 

Definition 2 (Autobisimulation). Let M = (IF, >, V) be a plausibility model. An autobisim¬ 
ulation on M is a non-empty relation R C W x W such that for all {w,w') G R and for all 
a G A: 

[atoms] V{w) = V{w'); 

[forth>] If u G IF and w v, there is a u' G IF such that w' v' and (u, v') G R] 

[back>] If u' G IF and w' v' , there is a u G IF such that w v and {v, v') G R] 

[forth<] If u G IF and w v, there is a u' G IF such that w' v' and (v, v') G R; 

[back<] If u' G IF and w' v', there is a u G IF such that w v and {v, v') G R. 

A total autobisimulation on M is an autobisimulation with IF as both domain and codomain. 

Our bisimulation relation is non-standard in the [back] and [forth] clauses. A standard 
[forth] condition based on an accessibility relation >„ would be 

If u G IF and w >a v, there is a u' G IF' such that w' >a v' and {v, v') G R. 

Here, R only appears in the part ‘(u,u') G R' . But in the definition of autobisimulation 
for plausibility models, in [forth>], the relation R also features in the condition for applying 
[forth>] and in its consequent, namely as the upper index in w v and w' v' . This 
means that R also determines which v are accessible from rc, and which v' are accessible from 
w' . This explains why we define an autobisimulation on a single model before a bisimulation 
between distinct models: We need the bisimulation relation R to determine the plausibility 
relation from the plausibility relation >a on any given model first, before structurally 
comparing distinct models. 

Example 1 . The models Mr and Mr of Figured] are reproduced in Figured] Consider the 
relation R = Rid U {{wi,W 3 ), {w 3 ,wi), ( 104 , 105 ), ( 005 , 004 )}, where Rid is the identity relation 

^Without the restriction to (pre)image-finite models, we were unable to prove the existence of a largest 
bisimulation. We leave this challenge open to future research(ers). 
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Figure 2 : The left and right models of Figure [H with the dotted lines showing the largest 
autobisimulations (modulo reflexivity). 


on W. With this R, we get that wi and are equiplausible for >^: 

wi W3 iff 

Minai[wi]R= n [u;i]a) Mina{[w3]R= n [ujsja) iff 

Mina{wi,W3} ~a Mina{wi,W3} iff 
Wi ~a Wi 

We also get that W2 >a W3: 

W 2 >a W3 iff 

Mina{[w2]R= n [t(;2]a) >a Mina{[w3]R= n [u;3]a) iff 

Mina{w2} >a Mina{wi,W3} iff 
W2 >a Wi 

This gives = {{wi,W3),{w3,wi),{w2,W3),{w2,wi)}URid. For b, we get = >b. The 
autobisimulation R on Mr is shown in Figure El It should be easy to check that R is indeed 
an autobisimulation. To help, we will justify why is in R: For >^, we have that, as 

{wi,W3) € R and wi W4, there must be a world v such that W3 v and {w4,v) € R. 
This V is W5. 

Note that R is the largest autobisimulation. Based on [atoms] there are only two possible 
candidate pairs that could potentially be added to R (modulo symmetry), namely {wi,W2) 
and {w2,W3). But W2 does not have a 6 -edge to a g world, whereas both rci and W3 do. There 
is therefore nothing more to add. 

The largest autobisimulation for Mr is completely analogous, as shown in Figure El 

Lemma 1 . Let M = iW,>,V) he a plausibility model and R a binary relation on W. If 
{w, w') G Rr^ and w ~a w' then w w'. 

Proof. From {w,w') G R^ and w ~a w' we get and [tcja = [u)']a and hence 

[tc]i?=n[t(;]a = [u;']i?=n[r(;']a. Thus also Mma([r(;]i?=n[r(;]a) = Mma([rc']R=n[r(;']a), immediately 
implying w w'. □ 

Let M = (VF, >,F) be a plausibility model. By definition, for each agent a, >a is a 
well-preorder on each ~a-equivalence class. The following result shows that the same holds 
for where R is any binary relation. 
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Lemma 2. Let M = {W, >,V) be a plausibility model and R a binary relation on M. Then 
is a well-preorder on each equivalence class. 

Proof. The relation >a partitions W into a well-preorder on each ~a-equivalence class, by 
definition. We need to show that does the same. Hence we need to prove: 1) is 

reflexive; 2) is transitive; 3) any ~a-equivalence class has >^-minimal elements; 4) if two 
worlds are related by they are also related by ~a- 

Reflexivity of is trivial. Transitivity: Let {w,v),{v,u) G >^. Then Mina{[w]ii= fl 
Ha) >a Mina{[v]R= fl [ti]a), and Mina{[v]R= n Ha) >a Mina{[u]R= n Ha). Using that for any 
sets X, Y, Z, Y X >aY and Y >a Z then X >a Z (transitivity of >a for sets is easy to check), 
we obtain that Mina[[w]R= n Ha) >a Mina[[u]R= n [«]„) and therefore {w, u) G >^. Minimal 
elements: Consider a ~a-equivalence class W" C W, and let W C W” be a non-empty subset. 
Suppose W does not have minimal elements. Then for all w' G W there is a w" G W 
such that w” w', i.e. Mina{[w'']R=n[w"]a) <a Mina{[w']R=r\[w']a). As w' G H]fl=CH]a) 

we get {tc'} >a Mina{[w']R= n H]a) then Mina{[w'']R= fl HH) <a In other words, 

for all w' G W there is a u € W, namely any u G Mina([w"]R= n [w"]a), such that u <a w'. 
This contradicts >„ being a well-preorder on W". We have now shown 1), 2) and 3). Finally 
we show 4): Assume w v, that is, Mina{[w]R= fl Ha) >a Mina{[v]R= fl Ha). This implies 
the existence of an x G Mina{[w]R= fl Ha) nnd a y G Mina{[w]R= C Ha) with x >a y. By 
choice of x and y we have x w and y ~a v- From x >a y we get x ~a V- Hence we have 
w X '^a y V, as required. □ 

Proposition 1. On any plausibility model there exists a largest autobisimulation. Further¬ 
more, the largest autobisimulation is an equivalence relation. 

We postpone the proof of this result to Section 14.11 since it is going to follow from the 
correspondence between bisimilarity and modal equivalence for our language of conditional 
belief (Theorem[T]). Let us already now reassure the reader that we are not risking any circular 
reasoning here: None of the results that lead to Theorem [1] and hence to Proposition [1] rely 
on largest autobisimulations. 

Definition 3 (Bisimulation). Let M = (IF,>,U) and M' = {W,>',V') be plausibility 
models and let M" = M U M' be the disjoint union of the two. Given an autobisimulation 
R on M", Y R' = Rr\ {W x W') is non-empty, then R' is called a bisimulation between M 
and M'. A bisimulation between (M, w) and {M', w') is a bisimulation between M and M' 
containing {w,w'). 

Example 2. Take another look at Me and Mr of Figure [H Let M' = Me U Mr and 
consider possible autobisimulations here. From Figure [2] we have the existence of a largest 
autobisimulation on Mr. For Me, the largest autobisimulation is just the identity. Naming 
them Rr and Re respectively, we (trivially) have that RRORe is an autobisimulation on M'. 
The question is whether we can extend Rr U Re to an autobisimulation on M' connecting 
the submodels Mr to Me. We can. This new autobisimulation is R = R' L) Rr U Re, where 
R'{ui) = R'{u 3 ) = {ui}, R'{u 2 ) = {u 2 } and R'{u/f) = R'{u^) = {us}. Now we easily get 
a bisimulation between Mr and Me as R fl {D{Mr) x D{Me)) = R'. Figure E] shows the 
bisimulation R'. 

Definition 4 (Bisimulation contraction). Let M = [W, >, V) be a plausibility model and let 
R be the largest autobisimulation on M. The bisimulation contraction of M is the model 
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Figure 3: See Figure [H The dotted edges show the largest bisimulation between Me and 
Mr. Model Me is isomorphic to the bisimulation contraction of Mr (on the left) and to the 
bisimulation contraction of M^, (not depicted). 


M' = {W,>',V') such that W = | w € W}, ^^'(['in]^) = ^iw), and for all agents a 

and worlds w,v G W: 

Mr Mr iff some w' G M]r aiid v' G Mr- M v'. 

Example 3. We compute the simulation contraction Mjj = {W, >', V) of Mr = (W, >, V). 
For and >(, take the reflexive closures. 


W' 


V'iM) 

V'({U4,U5}) 


{{ui,U3},{u2},{u4,U5}} 

{({« 2 },{'« 1 ,« 3 })} 

{{Rl,U3},{n4,R5})} 

{P} 

{P} 

{<?} 


Model Me is isomorphic to both the bisimulation contraction of Mr and the bisimulation 
contraction of Mr. 


Proposition 2. The bisimulation contraction of a plausibility model is a plausibility model 
and is bisimilar to that model. 


This proposition is not hard to prove, so we do not provide a full proof, but only sketch 
the overall idea. First, to prove that the bisimulation contraction {W, >', V') of a plausibility 
model {W,>,V) is a plausibility model, we simply have to prove that the relations >„ are 
well-preorders on each equivalence class. That is shown by first proving reflexivity of 
>(j, then transitivity of >(j, and hnally by proving that any non-empty subset has minimal 
elements with respect to >'^. To show that (IT, >,V) is bisimilar to {W, >',V'), we define 
the (functional) relation S : W ^ W as S = {(tc, [tc]i?) | w G W} and show that this is a 
bisimulation relation (that it satisfied [atoms] and the [back] and [forth] conditions). 

Definition 5 (Normal plausibility relation, normal model). Let M = (IT, >,T) be a plausi¬ 
bility model and let R be the largest autobisimulation on M. For all agents a, the relation 


















is the normal plausibility relation for agent a in M, for which we may also write The 
model is normal if for all a, >a = >„ • Any model M can be normalised by replacing all >a 

by>^ 

Example 4. Consider again the models Ml and Mu of Figure [2j From the largest bisimu¬ 
lation on Ml (shown by dotted edges), we can conclude that Mu is the normalisation of Ml 
(modulo a renaming of the worlds Wi to Ui, for i = 1,..., 5). 

Proposition 3. The bisimulation contraction of a plausibility model is normal. 

Proof. Let M be a plausibility model, and let M' = {W, >', V') be the bisimulation contrac¬ 
tion of M. The largest autobisimulation on M' is the identity relation Rid. For each agent a, 
we now have that = >(j. Therefore, M' is normal. □ 

3 Logical language and semantics 

In this section we define the language and the semantics of our logics. 

Definition 6 (Logical language). For any countably infinite set of propositional symbols P 
and finite set of agents A we define language by: 

::= p \ \ ip/\ ip \ Kaip \ Bf^ip\ B^ip \ 

where p & P, a a A, and n € N. 

The formula Kaip stands for ‘agent a knows (formula) ip\ Pfip stands for ‘agent a believes 
ip on condition ?/)’, B^ip stands for ‘agent a believes ip to degree n\ and tAaP stands for ‘agent 
a safely believes ip' . (The semantics of these constructs is defined below.) The duals of Ka, 
Ba and are denoted Ka, Ba and Oa- We use the usual abbreviations for the boolean 
connectives as well as for T and T, and the abbreviation Ba for BJ. In order to refer to 
the type of modalities in the text, we call Ka a knowledge modality, Bf a conditional belief 
modality, Ba a degree of belief modality, and Dq a safe belief modality. 

In Lp^^, if A is clear from the context, we may omit that and write , and if P is 

clear from the context, we may omit that as well, so that we get . The letter C stands 

for ‘conditional’, D for ‘degree’, and S for ‘safe’. Let X be any subsequence of CDS, then 
is the language with, in the inductive definition, only the modalities X (and with knowledge 
Ka) for all agents. In our work we focus on the logic of conditional 6e/ie/with language 
the logic of degrees of belief with, language L^, and the logic of safe belief with language . 

Definition 7 (Satisfaction Relation). Let M = (IT, >,V) be a plausibility model for P and 
A, let ^ be the normal plausibility relation for M, and let w E W, p £ P, a a A, and 
ip,^! £ . Then: 


M, 

w 

N 

p 

iff 

p £ V{w) 


M, 

w 

N 

^ip 

iff 

M, w 

^ ip 


M, 

w 

N 

y? A -0 

iff 

M, w 

\= ip and M, 

w \= tp 

M, 

w 

N 

Kaip 

iff 

M, V 

\= ip for all V 

G Ha 

M, 

w 

N 

Btip 

iff 

M, V 

\= ip for all V 

E Minail'ipjM n Ha 

M, 

w 

N 


iff 

M, V 

\= ip for all V 

E Mina[w]a 

M, 

w 

N 

Caip 

iff 

M, V 

\= ip for all V 

with W Pa V 
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P' 
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Figure 4: A plausibility model P and its bisimulation contraction P'. 


where 

Miny^[w]a 

( [w]a if Min'^[w]a = Ha 

\ Min'^[w]a^ Miny^{[w]a\ Min'^[w]a) otherwise 

and where \(p\m = {w \ M, w \= ip}. 

We write M \= ip (ip is valid on M) to mean that M, w \= ip for all w G W. 

Definition 8 (Modal equivalence). Consider the language Lp, for X a subsequence of CDS. 
Given are models M = {W, >, V) and M' = {W , >', V), and tc G VF and w' G W . We say 
that {M,w) and are modally equivalent in Lp, notation {M,w) =p {M',w'), if and 

only if for all ip G -Lp, M, w \= ip ii and only if M', w' \= ip. HP is obvious from the context 
we may write {M,w) {M',w'). 

The logic of conditional belief 

The logic of conditional belief appears in |30l El 132118]. where particularly the latter two 
are foundational for dynamic belief revision (older roots are Lewis’ counterfactual conditionals 
[25]). An axiomatisation is found in m- In this logic, defeasible belief BaP is definable as 
BJip, while Kaip is definable as Ba^L. 

Example 5. Consider Figured} In the plausibility model Me we have, for instance: Me \= 
—>■ {BaBbQ A -^KaBbq)'. If a knows p (true in vi and V 2 ), a believes, but does not know, 
that b believes q. Another example is Me \= Ba^*’'^K^-'q'. Conditional on b not believing q, 
a believes that b knows ^q. Only in V 2 does -^B^q hold; there K^—'q holds. A final example 
is Me \= KaP Ba^’^B^q'. From vi and V 2 (where KaP holds), formula K^q only holds in 
ui, and conditional to that, the one and only most plausible world vi satisfies B^q. We can 
repeat this exercise in Ml and Mli, as all three models are bisimilar and therefore, as will be 
proved in the next section, logically equivalent. 

The logic of degrees of belief 

The logic of degrees of belief, also known as the logic of graded belief, goes back to 
Grove [l6| and Spohn [29], although these could more properly be said to be semantic frame¬ 
works to model degrees of belief (there is no relation between the logic of degrees of belief and 
Fine’s logic of graded belief [13] and subsequent works, wherein we count the number of pairs 
(v, w) & R between two worlds v and w, or, alternatively, label the accessibility relation with 
that number). Logics of degrees of belief have seen some popularity in artificial intelligence 
and ACM style belief revision, see e.g. [MIESIES]. Belief revision based on degrees of belief 
have been proposed by [SllM]. The typical distinction between conviction (arbitrarily strong 
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belief) and knowledge, as in |23l 124] , is absent in our logic , wherein the strongest form of 
belief defines knowledge. Reasoning with degrees of belief is often called quantitative, where 
conditional belief can then be called qualitative. In other communities both are called qual¬ 
itative, and quantitive epistemic reasoning approaches are in that case those that combine 
knowledge and probabilities HZj. The zeroth degree of belief defines defeasible belief 
BaP- How Spohn’s work relates to dynamic belief revision as in [ 6 ] is discussed in detail in 
m- There have also been various proposals combining knowledge and belief {BJp or B'^p) 
in a single framework, without considering either conditional or degrees of belief, where the 
dynamics are temporal modalities, see [sni EH US]. For purposes of further discussions and 
the proofs in Section 14.21 we define belief layers as follows: 

Definition 9 (Belief Layers). Let M = (VF, >,V). For w € W, a & A and n € N, the nth 
(belief) layer of w for a is defined as E'^[w]a = Mm'^^{[w]a \ Mm^~^[w]a), where we use the 
special case Min~^[w\a = 0. 

This immediately gives the following lemma: 

Lemma 3. For M = (kF, >, V), w G kF, a & A and n G N, we have Min^[w]a = E'^[w]a U 
Min^~^[w\a- For n such that Mm'^[w]a = [w]a we have E2~^^[w]a = 0. We name the smallest 
such n the maximum degree (for a at w). If n is the maximum degree for a at w, we have 
M,w\= KaP ^ B(fp. 

In [5l [36l |22] different layers can contain bisimilar worlds. In our approach they cannot, 
because we define belief layers on the normal plausibility relation. Unlike [29] our semantics 
does not allow empty layers in between non-empty layers. If E'(f[w\a 7 ^ 0 and Ef'^‘^[w\a 7 ^ 0, 
then E'f'^^\w\a 7 ^ 0- Layers above the maximum degree will be empty, i.e. if there is a 
maximum degree n for a at w, as there will always be in our (pre)image-finite models, then 
for all k > n, we have E^[w]a = 0 - 

Example 6. In Figure [H we have that Me \= B^B^q but not Me ^ B^B^q. The maximum 
degree of belief for a in Me is at either vi and V 2 , where it is 1, so Me \= KaP ^ B^p. This 
is also true in the other two models. Consider now the models P and P' in Figure Eland an 
alternative definition of B(f not using Pa but >a (as in [5l [3611121 [ 8 ]). In the >a-semantics we 
have P ^ Ba-'q, as q is false in {y, z, w}. Only when we reach the third degree of belief does 
q become uncertain: P ^ Ba^q. With ^a-semantics, 2 is the maximum degree so P B(^^q. 
This can be seen in the bisimilar model P', where P' ^ B^-<q. 

The logic of safe belief 

The logic of safe belief goes back to Stalnaker m and has been progressed by Baltag 
and Smets (for example, how it relates to conditional belief and knowledge) in [S], which also 
gives a detailed literature review involving the roots of conditional belief, degrees of belief, 
and safe belief. An agent has safe belief in a formula p iff the agent will continue to believe 
p no matter what true information conditions its belief, i.e. M, w |= iff M, w ^ B^p for 
all D-free if s.t. M, w \= fj. In [8] safe belief is defined as M, w \= iff M, v \= p for all v 
s.t. w >a V. For both |3r)j and [ 8 ] true information are subsets of the domain containing the 
actual world. When this is what true information is, there is a correspondence between the 
two definitions, as indeed noted by Baltag and Smets. The complications of this choice are 
addressed in detail in m- For us, there is not a correspondence between the two definitions. 
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because we can only condition on modally definable subsets. When we, as we do, define safe 
belief using this correspondence is reestablished. 

Example 7. Consider for a hnal time the models of Figured) We have Mc,vi \= OaK^q, 
whereas Mc,V 2 ^ OaK^q. Now consider Ml and the >a-version of safe belief for which we 
have Ml,W 3 ^ ClaKbq- For [SO) [ 8 ] this is as it should be: For the subset {w 2 ,W 3 } (which 
includes the actual world as required) we have Mina{{w 2 , 103 } n [rcaja) = {W 2 } where 
Ml,W 2 ^ K^q. Using the ^^-version of safe belief, we have Ml,W 3 \= daKbq- For us, this is 
as it should be: As our conditional belief picks using IV'] n [w]a, any set containing W 3 must 
include the modally equivalent world wi. This corresponds to first normalising Ml io get 
M/j. In that model, U 2 is strictly less plausible than U 3 . 

The semantics we propose for degrees of belief and safe belief are non-standard. Still, 
as we show in the following, these non-standard semantics and the standard semantics for 
conditional belief are all bisimulation invariant. This makes the results in Section [5] showing 
a non-trivial expressivity hierarchy between these logics even more remarkable. 

4 Bisimulation characterisation for and 

4.1 Bisimulation correspondence for conditional belief 

In the following we prove that for the language bisimilarity implies modal equivalence and 
vice versa. This shows that our notion of bisimulation is proper for the language and models at 
hand. The proof of Proposition |4] below is essentially a standard proof of bisimilarity implying 
modal equivalence: modal equivalence is proved by induction on the structure of the formula, 
where in the induction step the back and forth conditions of bisimilarity are applied to the 
induction hypothesis. However, the induction case of conditional belief formulas is a 
bit more involved than for standard modalities. Additional work is needed to ensure that 
when applying the back and forth conditions we produce a world which is among the minimal 
7 -worlds. 

Proposition 4. Bisimilarity implies modal equivalence for . 

Proof. Assume iMi,wi)t^{M 2 ,W 2 ). Then, by definition, there exists an autobisimulation 
R on the disjoint union of Mi and M 2 with {wi,W 2 ) G R- Let M = (IF, >,U) denote the 
disjoint union of Mi and M 2 . We then need to prove that {M,wi) and {M,W2) are modally 
equivalent in Lc- We will show that for all (p in Lq, for all {w,w') € R, if M, u) |= ip then 
M,w' \= ip. This implies the required (the other direction being symmetric). The proof is 
by induction on the syntactic complexity of ip. The propositional cases are easy, so we only 
consider the cases ip = Ka'if and ip = B2iI>. Consider first ip = Ka'if. In this case we assume 
M, w \= Kaif, that is, M, v \= if for all v with w ~a v. Let v' be chosen arbitrarily with 
w' ~a v'. We need to prove M, v' \= f). From Lemma[2]we have that is a well-preorder on 
each ~a-equivalence class. Since w' v' we hence get that either w' v' or v' w'. We 
can assume w' v'^ the other case being symmetric. Then since {w, w') G R and w' v', 
[back>] gives us a u s.t. {v,v') G R and w v. Lemma [2] now implies w ~a v, and hence 
M, V \= tp. Since (v, v') G R, the induction hypothesis gives us M, v' \= ip, and we are done. 

Now consider the case ip = Bftp. This case is more involved. Assume M,w \= Bjfj, that 
is, M, V \= ^p ior all v G Minad'yjM C [tc]a). Letting v' G Miuail'yjM C ['W^la), we need to show 
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M, v' \= ijj (if Miuail'yjM n [tf^]a) is empty there is nothing to show). We will first find a y in 
Minail'ylM n [re]a), then find a y' with {y,y') G R, and only then apply [back>] to y' v' 
to prodnce the required v. The point is that our choice of y in Mina{\')\M H [rc]a) will ensure 
that V is in Mina (Mm n [tcja). 

As mentioned, we want to start out choosing a y in Mina{\^\M H [rc]a), so we need to 
ensure that this set is non-empty. By choice of v' we have v' € Mm and v' ~a w'. From 
v' ~a w' we get that w' v' or w' v', using Lemma [2l Since also {w,w') G R, we can 
apply [back>] or [back<] to get a u such that (n, v') G R and either w u ot w u. From 
{u,v') G R and v' G Mmj we get u G |7]]m, using the induction hypothesis. From the fact 
that either w u or w u we get w ~a u, using Lemma[2j Hence we have u G MmH [rc]a. 
This shows the set |7 ]]m H [re]a to be non-empty. Hence also MinadjlM [^]a) is non-empty, 
and we are free to choose a y in that set. Since y ~a w, Lemma[2]gives us that either y w 
or w y, so we can apply [forth<] or [forth>] to find a y' with (y, y') G R and either 
y' w' or w' y'. 

Claim 1. y' v'. 

Proof of claim 1. We need to prove Mina{{y']R-^ n {y']a) >a Mina{{v']R-^ n [n']a). We first 
prove that [y']^^ n [y']a C Mm n [w']a: 

• [y']R= n [y']a C Mm: Assume y" G [y']R= n [y']a. Then (y',y") G R=. Since we also 
have (y, y') G R, we get (y, y") G R^. From (y, y") G R^ and y G Mm a finite sequence 
of applications of the induction hypothesis gives us y" G Mm- 

• [y']R= n [y']a C [rc'ja: Assume y" G [y']R^ H [y']a- Then y" ~a v' ■ Since we have either 

y' O':' we must also have y' ~a w', by Lemma [2j Hence y" ~a y' ~a w' 

implying y" G [w']a. 

Since v' is chosen minimal in MmHMJs and [y']R=r\[y']a C MmHMJq we get Minai[y']R^n 
[y']a) >a {u'} >a Mina{[v']R= H [u']a), as required. This concludes the proof of the claim. 

By choice of y' we have (y, y') G R, and by Claim 1 we have y' v'. We can now finally, as 
promised, apply [back>] to these premises to get a v s.t. (u, v') G R and y v. 

Claim 2. Mina{[v]R= n [?;]a) C Mina(MM n [reja). 

Proof of claim 2. Let x G Mina{[v]R= fl [u]a). We need to prove x G Mma(MM C [tc]a). We 
do this by proving x G Mm, x G Ma and {x} <a MiriaihlM n Ma): 

• X G |7]]m: By choice of x we have {v, x) G R^. From (v, x) G R^ and (v, v') G R we get 

(v',x) G R^. From (v',x) G R^ and v' G Mm a finite sequence of applications of the 

induction hypothesis gives us x G |7]1m- 

• X G [w]m'- By choice of x we have x ~a v. Since y v, Lemma [2] implies v ~a y- By 
choice of y we have y ~a w, so in total we get x v y w, as required. 

• {2:} <a MinaHjlM n Ma): 

{x} <a Mina{[v]R^ n [x]a) by choice of x 
<a Mina{[y]R= n [y]a) since y v 
<a {y} 

<a Mma(MM n Ma) since y G Mina(MM C Ha). 
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This concludes the proof of the claim. 

Now we are finally ready to prove M,v' \= V'- Let z G Mina{[v]R= H [f]a)- Then z G 
Miuad'yjM n [tc]a), by Claim 2. Hence M,z \= by assumption. Since {v,z) G and 

(u,u') G i? we get {z,v') G R^, and hence a finite sequence of applications of the induction 
hypothesis gives us M, v' \= □ 

We proceed now to show the converse, that modal equivalence with regard to implies 
bisimulation. The proof has the same structure as the Hennessy-Millner approach, though 
appropriately modified for our purposes. Given a pair of image-finite models M and M', 
the standard approach is to construct a relation R C D{M) x D{M') s.t. {w,w') G i? if 
M, w = M', w'. Using O-formulas, it is then shown that R fulfils the requirements for being a 
bisimulation, as such formulas denote what is true at worlds accessible by whatever accessi¬ 
bility relation is used in the model. This means that modally equivalent worlds have modally 
equivalent successors, which is then used to show that R fulfils the required conditions. For 
our purposes this will not do, as we only have iFa-formulas (i.e. for ~a). Instead, our equiv¬ 
alent to 0-formulas are of the form stip, each such formula corresponding to accessibility to 
the most plausible ■0-worlds from all worlds in an equivalence class. What we want are for¬ 
mulas corresponding to specific links between worlds, so we first establish that such formulas 
exists. We thus have formulas with the same function as 0-formulas serve in the standard 
approach. 

Proposition 5. Modal equivalence with respect to implies bisimilarity. 

Proof. Assume {Mi,w) {M 2 ,w'). We wish to show that {Mi,w)t±{M 2 ,w'). Let M = 
Ml U M 2 be the disjoint union of Mi and M 2 . We then need to show that Q = {{v,v') G 
D{M) X D{M) I M,v M,v'} is an autobisimulation on M. Note that as is an 
equivalence relation, so is Q. We first show that 0-hke formulas talking about the >«- 
relations between specific worlds in M exist. 

Claim 1. Let w and w' be worlds of the model M = (IF,>,U) where w >a w'. Further 
let (p G be any formula true in w'. There then exists a formula 0 G such that 
{[w]q U K]q) n [w]a = [01m n [w]a and M,w\= B^p. 

Proof of Claim 1. If two worlds s and s' are not modally equivalent, there exists some 
distinguishing formula with M, s \= and M, s' As ~a is image-finite (since 

both >a and its converse are) the following formula is finite: 

Tt = I t ~a A (0 1') 0 Q} 

The formula Tt distinguishes t from all the worlds in [t]a that it is not modally equivalent to. 
If there are no such worlds, is the empty conjunction equivalent to T. 

We now return to our two original worlds w and w'. With the assumption that M, w' \= p, 
we show that 0 = V is a formula of the kind whose existence we claim. First note that 
[^«;1m n [tcja contains only those worlds in [tcja that are modally equivalent to w, exactly 
as [u;]q n [tcja does. As [T^Jm U |^^'1m = [^«; V we have ([u;]q U [w'Jq) D [u;]a = 

|\I'^VT^/]Mn[rc]a. To get M, re |= Ha we need to show that G Minad^w P ^w'}MC[w]a) 
s.t. M, V \= p. Pick an arbitrary v G Mina{\w']Q fl [rc^]a)- We will now show that this has the 
required properties. 
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Let T = Since T = ([t(;]QU[t(;']( 3 )n[u;]a, Lemma[I]gives u w or tt 

w' for all u ^ T. Together with w >a w', this gives w' € Min q T. Choose u £T arbitrarily. 

n—O, 

We then have u >a w’ and, by definition, that Mina{[u]Q fl [rr]a) >a Mina{[w']Q D [rc']a)- By 
choice of v we can then conclude {u} <a Mma{[w']Q n [tc']a) <a Mina{{u]Q n [u]a) <a {^t}- As 
u was chosen arbitrarily in T, this shows v G MiuaT. As u € [w']q we have M,v M,w' 
and by assumption of M, w' \= ip that M, v \= p. We now have v G Mina{\^w V ^«;'lA 4 'n [u;]a) 
and M, v \= p, completing the proof of the claim. 

We now proceed to show that Q fulfils the conditions for being an autobisimulation on M 
(Definition [2|) . [atoms] is trivial. Next we show [forth>]. Let {w,w') G Q (i.e. {M,w) 
{M,w')) and w >a v. We then have that [forth>] is fulfilled if 3v' G W, s.t. w' >a v' and 
{v,v') G Q (i.e. (M, u) {M,v')). To this end, we show that assuming for all v' G W, 

w' >a v' implies (M, v) (M, v') leads to a contradiction. This is analogous to how Q is 

shown to be a bisimulation in standard Hennessy-Millner proofs. 

We first show that >? is image-finite. First recall that by assumption on plausibility 
models, >a is (pre)image finite, that is, both >a and <a are image-finite. It follows that 
~a = >a U <a is image-finite as well. If a relation is image-finite, then so is any subset of the 
relation. Therefore, as >a C must be image-finite. Hence the set of >®-successors 

of rc', S' = {u' I w' >a v'} = {v'l,... ,u(j} is also finite. Having assumed that v and none of 
the v[s are modally equivalent, we have that there exists a number of distinguishing formulae 
, one for each such that M, v |= and M, v'^ ^ (p'"i. Therefore, M, v ^ A • • • A . 
For notational ease, let p = A ■ ■ ■ A . 

With M, V \= p, Claim 1 gives the existence of a formula V', such that ([w^jg U [u]q) fl [re]a = 
[V’Im n [re] a and M,w \= Bfp. Due to modal equivalence of w and w', we must have 
M,w' \= Bap. This we have iff 3u' G C [rc'ja), s.t. M,u' |= p. By construction 

of p, no world v[ exists such that w' >a v[ and M,v[ ^ p, so we must have u' >a w'. As 
u' G [w']a, the definition of >a gives Mina{[u']Q fl [rc'ja) >a Mina{[w']Q C [rc'ja), so we get 
3w" G Mina{[w']Q D [rc'ja) s.t. u' >a w". As u' G MmadV’jjM C [rc'ja), we must therefore 
have w” 0 [V’Im, and then also w' ^ IV'liW- But as M, tc \= ip, we get the sought after 
contradiction (we initially assumed {M,w) {M,w')). We get [back>] immediately from Q 

being an equivalence relation. 

Now we get to [forth<]. Let {w,w') G Q and w <a v. We have that [forth<] is fulfilled if 
3v' G W, s.t. w' <a v' and {v,v') G Q. 

Claim 2. There exists a u' G [tc'ja satisfying {v,v') G Q. 

Proof of Claim 2. Suppose not. Then v does not have a modally equivalent world in [rc'ja. 
Thus there must be some formula p holding in v that holds nowhere in \w']a- Since v G [reja 
(using Lemma[2]), this implies that M, w \= KaP and M, w' ^ Kap. However, this contradicts 
{w,w') G Q, concluding the proof of the claim. 

Let v' be chosen as guaranteed by Claim 2. It now suffices to show w' <a v'■ From iv, v') G Q 
and V >a w, [forth>] gives a w" s.t. v' >a w" and {w,w") G Q. From v' >a w” we get 
v' ~a w", using Lemma [2j Since v' G [w']a we further get w' ~a v' ~a w”. Since {w,w'') G Q 
and {w,w') G Q we also get {w',w") G Q. From w' ~a w" and {w',w") G Q Lemma [U gives 
us w' w". From this and v' >a w" we get v' >a w' and hence w' <a v', as required. This 
concludes proof of [forth<]. As for [back>] getting to [back<] is easy and left out. □ 
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Theorem 1 (Bisimulation characterisation for L^). Let {M,w), {M\w') he plausibility mod¬ 
els. Then: 

{M,w)i± {M',w') iff {M,w) {M',w') 

Proof. From Proposition 0] and Proposition [5j □ 

We can now finally give the promised proof of Proposition [TJ 

Proof of Proposition [I]. First note that neither the semantics of nor the proofs of Propo¬ 
sition 0] and [5] rely on the existence of largest autobisimulations. Hence we can use these 
in proving the proposition. Given a plausibility model M = {W,>^V) we define a relation 
R hy R = {{w,v) G | M,w M,v}. Since modal equivalence implies bisimilarity 
(Theorem [5]), i? is a bisimulation relation (indeed, R is exactly the relation shown to be an 
autobisimulation in the proof of Proposition [5]). Now we have to show that R is the largest 
autobisimulation. If it was not, there would exist an autobisimulation R' with R' — R tb. By 
definition of R, R' would then contain at least one pair (tc, v) with M, w M, v. However, 
since bisimilarity implies modal equivalence (Proposition [3]), this contradicts R' being an au¬ 
tobisimulation. Hence R must be the largest autobisimulation. It only remains to prove that 
R is an equivalence relation. However, this is trivial given its definition in terms of modal 
equivalence. □ 

4.2 Bisimulation correspondence for degrees of belief 

We now show bisimulation characterisation results for the logic of degrees of belief L^. Let 
M = (VF, >,P). Recalling Definition [71 for some world tc G W, the set Min^[w\a contains 
the minimal worlds with respect to Pa in the ~a-equivalence class of w. For a given w 
and a, we refer to the generalised definition Minf^[w\a as (belief) sphere n oi w for a. The 
distinction between Mina and Mina is important to keep straight! The former Min —used to 
give semantics of the Bff modality of —is with respect to the relation Pa- The latter Min 
is with respect to >a, used to give the semantics of . Dealing as we do in this section with 
L^, we hrst state some necessary observations about the properties of what we call beliefs 
spheres. When convenient we will simply say that v is in (belief) sphere n for a, understanding 
that this actually means v G Min’^[v]a. 

It follows easily from the definitions, that for any world w, sphere n for a is wholly 
contained within sphere n -|- 1 for a, i.e. C Min'^'^^[w]a. 

Lemma 4. Let M = (VF, >, V) he a plausibility model and consider w,v G W. Ifw^aV and 
w 0 Min^[w\a, we have the following two properties: 

(i) Lf V G Min^[w]a, then w Pa v. 

(a) Lf V G Mina~^^[w]a then w Pa v . 

Proof. The truth of (i) easily comes from the definition of Min^. For (ii), we consider two 
exhaustive cases for v. Either v G Min^'^^\w\a \ LLin'l[w]a in which case w Pa v follows from 
^a-minimality, since by assumption w G {w\a \ dMin^\w\a- Otherwise v G Min”[rc]a, and so 
from w ^ Min'f^[w]a and (i) it follows that w Pa v and hence also w Pa v. □ 

Now getting to the meat of this section, showing bisimulation correspondence for L^, we 
first show that bisimilar worlds belong to spheres of all the same degrees. 
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Lemma 5. If {Mi,wi)i±{M 2 ,W 2 ) then for all n G N, wi G Min'flwija iff W 2 G Min'f[w 2 ]a- 

Proof. Assume {Mi, wi)^^{M 2 , 102 ). By definition there exists an autobisimulation R on the 
disjoint union of Mi and M 2 with {wi,W 2 ) G R. Using Proposition [H let i?max denote the 
largest bisimulation on the disjoint union of Mi and M 2 (so Then R C i?max- 

We are going to show by contradiction that for any {w,w') G i?max (which includes {wi,W 2 )) 
and n G N, tc G iff w' G Min^[w']a. Suppose that this does not hold. Then there 

must be some pair of worlds w and w' such that {w,w') G i2max and either i) tc G Min^[w\a 
and w' 0 Min^[w']a, or ii) w 0 Min”[raja and w' G Min^[w']a for some n. Let n be the 
smallest natural number for which we have either i) or ii). Because the cases are symmetrical, 
we deal only with i). Using the alternative definition Min2,[w]a = E2[w\a U Min'f~^[w\a we 
can deal with both n > 0 and n = 0 simultaneously. 

By assumption of the smallest n we have w ^ Min'f~^[w\a, since w' 0 Min'f[w']a implies 
w' ^ Min^[w'\a for all 0 < A: < n (so we could otherwise have chosen a smaller n). Therefore 
w G E^[w]a and w' ^ E^[w']a. Because w' G [tc'j \ Min'f[w']a, we know that n is not the 
maximum degree, so there must be some world v' G E2\w']a which by definition means 
that v' 0 With v' G E'^[w']a C Min^[w']a and and w' 0 Min^[w']a, Lemma 

0] gives w' )~a v', he. w' Pa v' and v' w'. By [back>] there is a n s.t. w Pa v and 
{v,v') G i?max- Because v' 0 Mm”“^[n;']a we cannot have v G Mina~^[w]a, as we could 
then again have chosen a smaller n making either i) or ii) true. Thus v G [tc]a \ Min^~^[w]a. 
As u) G Min2[w]a, Lemma 0] gives v Pa w, so by [forth>] there is a u' s.t. v' Pa u' and 
{w, U ) G RrasiX' 

With {w,w') G i?max and {w,u') G Rmax-, we have {w', u') G i?max- As w' ^a u' (we have 
w' Pa v' and v' Pa u'). Lemma 0] gives w' y^'_ y^' ^ 

Min^[w’]a, we then have u' 0 Min^[w']a. As u' 0 Min'^[w']a while v' G E'2[w']a C Min^[w']a, 
Lemma0]then gives u' Pa v'. But this contradicts v' Pa v!, concluding the proof. □ 

Proposition 6. Bisimilarity implies modal equivalence for . 

Proof. Assume {Mi,wi)i±{M 2 ,W 2 ). Let M = {W, >,V) denote the disjoint union of Mi and 
M 2 . Then there exists an autobisimulation R on M with {wi,W 2 ) G R. Using Proposition [H 
let i2max denote the largest autobisimulation on M. Then R C i?max- We need to prove that 
{M,wi) {M,W 2 ). 

We will show that for all {w,w') G i?maxj for all ip G , M, w \= ip iS M, w' \= ip (which 
then also means that it holds for all {w,w') G R). We proceed by induction on the syntactic 
complexity of ip. The propositional and knowledge cases are already covered by Proposition 01 
so we only go for ip = B^if. 

Assume M, w \= B^fj. We need to prove that M, w' \= B^fj, that is M, v' \= for all 
v' G Mina[w']a. Picking an arbitrary v' G Mm”[rc']a, we have [w']a = W]a from Lemma O 
and either w' Pa v' or w' Pa v' (so we also have v' G Min'f[v']a). Using [back>] or [back<] as 
appropriate, we get that there is a u such that w Pa v 01 w Pa v, and {v, v') G i?max- Prom 
this, v' G Min^[v']a, and Lemma [5] we get v G Min”[u]a, allowing us to conclude v G Min”[re]„ 
from [r(;]a = [u]a. With the original assumption of M,w |= we get M,v |= if. As 

{v,v') G i?max, the induction hypothesis gives M, v' \= ip. As v' was chosen arbitrarily in 
Mina[w']a this gives M,w' \= Bpf'f’. Showing that M,w' |= Bpp'ip implies M,w ^ ^”'0 is 
completely symmetrical and therefore left out. □ 

We now get to showing that modal equivalence for the language of degrees of belief im¬ 
plies bisimilarity. Trouble is, that the modality uses the largest autobisimulation for 
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deriving the relation ^a- This makes it difficult to go the Hennessy-Millner way of showing 
by contradiction that the modal equivalence relation Q is an autobisimulation. 

Instead, we establish that modal equivalence for implies modal equivalence for . 
We go about this by way of a model and world dependent translation of formulas into 
formulas fDefinition llOp . This translation has two properties. First, the translated formula 
is true at M, w iff the untranslated formula is (Lemma [7|) —a quite uncontroversial property. 
More precisely, letting M = {W, >,R) be a plausibility model, then for any w G W, 7 G 
where (Tm,w{i) is the translation at M,w: M,w |= 7 M,w ^ crM,w{'y)- Assume further 
that we have some M',w' such that {M,w) {M',w'). As is a formula of we 

can conclude M',w' \= (yM,w{l)- So in all we get that 

M, 1= 7 <t7 M, u; 1= (Tm,w{i) M', w' ^ (*) 

The second property is that the translation of 7 is the same for worlds modally equivalent 
for (Lemma[ 8 |): If {M,w) {M',w') then This then gives 

M',w' \= (JM,wi'y) ^ M',w' ^ crM',w'i'y) ^ M',w' ^ 7 (**) 

Combining (*) and (**) gives that if (M, w) {M', w') then M, re |= 7 iff M', w' \= 'j for any 
7 G , i.e. that {M,w) {M',w'). As shown in the previous section, modal equivalence 

for implies bisimilarity (Proposition [5]), and we can therefore finally conclude that modal 
equivalence for implies bisimilarity (Propositior^T]) . 

Lemma 6 . For a plausibility model M, a world w G D{M), agent a € A and a formula if of 
, if IV’Im n [tc]a 7 ^ 0, there is a unique natural number k for which MmadV’lM H [rc]a) C 

Ea[w]a (= Min-^^{[w]a \ Minl-\w]a)). 

Proof Let S = liflu H [re] a. We first show that all worlds in Miua S are equiplausible with 
respect to Pa- 

Take any two worlds vi,V 2 G MiuaS. We wish to show vi V 2 , i.e. Mina{[vi]R n 
[ui]a) —a Minai[v 2 ]RF[v 2 ]a), where R is the largest autobisimulation on M. With PropositiorS] 
(bisimilarity implies modal equivalence for and for i = 1,2, we have that [vi]R C 
Hence [ui]ijn[uj]a = [ui]Rn[u;]a C l'il>jMF[w]a = S. With Uj G Miua S and u* G [ujjijnfujja C S, 
we have Vi G Mina{[vi]R n [uj]a) (if an element of a set A is minimal in a set B ^ A, then 
it is also minimal in A). From this we can conclude that Mina{[vi]R fl [uj]a) {uj}- Since 
Vi ~a V2 we get Mina{[vi]R fl [uija) {^’ 2 } Mina{[v 2 ]R C [v2]a), Concluding the 

proof that vi V2- 

Due to (pre)image-finiteness of M, [teja is finite. This means that for any v G [rc]a there is a 
unique natural number k for which v G E^[w]a- As all worlds in Miua S are ^a-equiplausible, 
we have that Mina S P Ra['^]a for some unique k. □ 

Having established that if IV’Im C [raja 7 ^ 0 then there does indeed exist a unique k st. 
Minadip^M n [tc]a) C E^[w]a, we have that the following translation is well-defined. 

Definition 10 (Translation (Tm,w)' Let M = {W,>,V) be a plausibility model and 7 G 
be given. We write a m, wi'y) for the translation of 7 at M,w into a formula of defined as 
follows: 

crM,wip) = P 
0'M,wi^p) = ~^crM,wip) 

0'M,wi'Pl A ¥^ 2 ) = aM,wiPl) A (TM,wiP2) 
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(TM,wiBf(p) 


^ I f € [-wja} A B’^\J{aM,v{i’) I ^ ^ Na} if Mm n ^ 0 

Ka V{o'M,-!;(-'V') I V G Ha} if Mm H Ha = 0 


where k is the natural number such that Mma(MM H Ha) ^ B^[w]a- As Kaif is dehnable 
in as Ba '^we need no Ka^p-case in the translation. 

We need (pre)image-finiteness of M because the translation of (TM,w{Btp) is based on 
either Ha or Mma(MM H Ha)- For aM,w{Btp) to be hnite, we need finiteness of Ha- 
We now get to showing the first of the promised properties of the translation, namely that 
the translated formula is true at M, w iff the untranslated formula is. 

Lemma 7. Given a plausibility model M = {W,>,V) and 7 G we have M,w \= 'y iff 
M,w \= ctm, wiy) for all w G W . 

Proof. We show both directions by induction on the modal depth of 7 . For the base case of 
a modal depth of 0, we have o'M,w{'y) = 7 easily, giving M,w |= 7 iff M,w ^ o'M,wiy)- The 
p-, A-cases being quite easy, we deal only with 7 = Bfip in the induction step. For that 
case there are to subcases; whether aM,w{y) is a iFa-formula or not. 

(^) : M,w \= 7 implies M,w \= crM,w{'y)- 

Take hrst the case \f>\M H [rc]a = 0 where cjm,w {Btp) = KaM{(TM,v{~^f^) I ^ ^ Na}- If 
[V’Im n [rc]a = 0, then M, |= for all v G [rcja- Applying the induction hypothesis gives 
M,v ^ crM,vi~''4’) for all v G Ha- Then we also have M,u ^ \/{o'M,vi^'f’) \ v G Ha} for all 
u G Ha and hnally M,w \= Ka\l{cFM,v{-^'f) \ v G Ha}- 

Now take the case IV'Im H [rcja 7 ^ 0- Letting S = Minad'fjM H [rc]a) and k be chosen 
as in the translation, i.e. such that S C E^[w]a, we wish to prove that M,w \= Bfp 
implies M,w \= B^\/{au^vi'f —>■</?) | G Ha} B^\/{aM,vi'f’) \ v G Ha}- We hrst show 
M,w \= B^ \/{crM,v{'f) I V G Ha}- Because M,v |= if for all v ^ S, the induction hypothesis 
gives M,v \= aM,v{'f) for all v G S. From this we can conclude M,u \= V{'^M,-u(V’) H € S'} 
for all u G S, and thus also M,u \= \/{crM,v{'f) | v G Ha} for all u G S. From LemmaE]we 
have S C Min^[w]a, so M,u ^ \/{o'M,v{f’) \ v G Ha} for some u G Min^[w]a. This gives 
M,w \= B^ \/{(TM,vi'f) I V G Ha}- Next is M,w \= B^ \/{(TM,v{'f p)\v G Ha}- 

Claim. If M, w \= Bfip, then for all v G E^[w]a H Mm, M, v \= p. 

Proof of claim. We show the claim by contradiction, assuming that at least one world in 
E^[w\a n IV’Im is a world. Let v be this if A - 199 -world. As v G E^[w]a, we have 
{ti} E^[w]a S, and specihcally that Vs G S : ~^max g_ means Vs G 

S : Min{[v]R^^ fl [n]a) c^a Mina{[s]R^^^ fl [s]a). Because Vs G S : Mina{[s]R^^^ n [s]a) c^^a S, 
we have Min{[v]R^^^ n [n]a) —a S and thus some v' G Min{[v]R^^^ n [n]a) such that {?;'} ~a S. 
Combining v' G with Theorem [T] gives M,v M,v' and thus that M,v' |= A - 199 . 

Putting v' G IV’Im together with {n'} ~a S, means that v' G S. As M,v' \= - 199 , we have a 
contradiction of M,w ^ Bfp, concluding the proof of the claim. 

With M,w \= Bfp, we now have M,v \= p for all v G E^[w]a n Mm, and thus M,v \= 
if ^ p for all V G ifaHa- Lemma [ 6 ] gives S C E^[w]a, and by dehnition we have ifaHa Fl 
Min^~^[w]a = 0, that is, there are no V’-worlds below layer k, so M,v \= if ^ p for all v G 
MfUaHa- Using the induction hypothesis gives M,v ^ o'M,v{'if p) for all v G Min^[w\a 
and therefore M,w ^ \/{'^M,i,(V’ p) \ v G [rc]a}, finalising left-to-right direction of the 

proof. 
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(<^) : M,w \= (Tm,w{i) implies M,w |= 7. 

We show the stronger claim that M, w \= (Tm,w'{i) for some w' € D{M) implies M, re |= 7. 
Let 7 = and suppose that M,w \= o'm,w’{j) for some w' G D{M). We then need to 
show M,w \= Btp. First take the case where IV'Im H [rc'Ja = 0. Then aM,w'{Btp) = 
Ka\/{(TM,v'{^‘ 4 ’) I v' G [tr’']a}, he. M,w \= iha I v' G [rc']a}. This means that 

M,v ^ \/{o'M,v'i~'' 4 ’) I v' G for all v G [rc]a, i.e. for any v G [reja there is a u' G [rc'ja 

such that M,v ^ o'M,v'i~'' 4 ’)- Applying the induction hypothesis, we get M,v \= -•V’ for all 

V G [u)]a. Thus [V'Im n [u)]a = 0 and we trivially have M,w \= Bfp. 

Now take the case Mm H [w']a ^ 0. Letting S' = Mma(MM H [tc']a) and k' be s.t. S' C 
E^[w']a, we have M, w [= B^ V{(frM,t.'(V’ p) \ v' e [u)']a} A B^' yidMyii’) \ v' G M]a}. 
From M,w \= B^ \J{(TM,v'{i> p)\v' ^ M]a} have M,v \= \J{crM,v'{i^ p)\v' ^ M]a} 

for all V G Min^ [tc]a, i.e. for any v G [u;]a there is a u' G [tc']a such that M, v \= (Tm,v'{'4’ p)- 
Applying the induction hypothesis, we get M,v |= V' —>■(/? for all u G Min^ From 

M,w ^ B^ \J{aM,v'{'>P) I v' G M]a} we have M,u ^ V{'^m,d'(V’) I v' G M]a} for some 

V G Min^ Ma, i.e. there is a u G [rc]a and a u' G [w']a such that M,v ^ o'M,v'i'4’)- Applying 
the induction hypothesis gets us M, v \= Thus we have M, w ^ B^ (ip ^ p) A B^ p) (where 
pJ^pe L'^). 

From M,w \= B^p) we have that |'!/’1 m H [tc]a ^ 0, so Lemma E] gives the existence of 
a k, s.t. Minaifip^M H [tc]a) C Min^[w]a- We also have from M,w \= B^' ip that k < k', 
so MinailipjM n Ma) C Min’^[w]a- With M,w \= B^'{ip -A p) we get M,v \= p) ^ p 
for all V G Mina{\'p>\M H [rc]a), then M,v ^ p for all v G MiriadV’lM H [rc]a), and finally 
M,w^Btp. □ 

We have now gotten to the second of the two promised properties; that the translation is 
the same for worlds modally equivalent for . 

Lemma 8. Given plausibility models M and M', for any w G D{M) and w' G D{M'), if 
{M,w) {M',w') then for any formula 7 G , crM,w{l) = 

Proof. We show this by another induction on the modal depth of 7. For the base case of 
modal depth 0 we trivially have (Tm,w{i) = 

For the induction step we, as before, only deal with 7 = B^p. Note first that every world in 
[reja is modally equivalent to at least one world in [tc']a. If that wasn’t the case, there would 
be some L^-formula p true somewhere in [rc]a and nowhere in [w']a. Then M,w |= KaP 
while M',w' ^ KaP, contradicting {M,w) {M',w'). A completely analogous argument 

gives that every world in [w']a is modally equivalent to at least one world in [rc]a. Thus 
[V’Im n [reja = 0 iff IV'Fm n [tc'Ja = 0. We thus have two cases, either both crM,w{Bf p) and 
^M',w'{Btp) are ATa-formulas, or both are i?^-formulas. 

We deal first with the case where both translations are iFa-formulas. Here we have 
CrM,w{Bfp) = Ka\/{aM,vhP) I ^ ^ Na) and (7M',w'{Bfp) = Ka\/{aM',v'hp) I v' G Ma}. 
As already shown, for all v G [reja there is a u' G [w']a such that {M,w) {M',v'), and vice 

versa. The induction hypothesis gives crM,v{~'P) = (^M',v'i^p) for all these vs and v's. Then 

\/WM,vhp) I V G Ha} = \/WM',v'hp) I v' G H]a} and thus aM,w{Btp) = aM',w'{Bfp). 

Take now the case where both translations are H^-formulas. A similar argument as above 
gives V{<^M,i;(V’ -A p) \ V ^ Ha} = \J WM',v'{'Ip -A p) \ v' ^ H]a} and V{'7M,i;('0) I V G 
['a’]a} = \lW m', v’{'4’) I v' G ['a'la}. Letting k and k' be the indices chosen in the translation 
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of and aM\w'{Bt(p) respectively, we have aM,w{Bf(p) = aM',w'iBfip) if k = k'. 

Assume towards a contradiction that k > k' . Lemma El now gives n [rcja) n 

MinJl [w]a = 0, so M, n 1= for all v G Min^[w\a- With Lemma[7]we have M, n |= (Tm,v{~^'^) 
for all V € Min^ [tc]a and thus also that M,w \= B^ \/\ v € [rcja}. From Lemma 
El we also have Minad'f/ijM H [rc']a) C Mi'n^[w']a, so M',v' ^ -i-i/i for some v' G Min^[w'\a- 
From here we use Lemma [7] to conclude M',v' ^ for some v' G Min^ [rc'Ja and 

thus M',w' ^ B^ y I v' G [rc']a}. By the work done so far, this also means 
M',w' ^ B^ I V G [tc]a} which contradicts {M,w) {M',w'). The case when 

> A: is completely symmetrical, and the proof if thus concluded. □ 

Proposition 7. Modal equivalence for implies bisimilarity. 

Proof. Let M = {W,>,V) and M' = (kF',>',W) be two plausibility models. We first show 
that if {M,w) {M',w') then {M,w) {M',w'). Assume {M,w) {M',w,') and let 7 

be any formula of . 


M, tc 1= 7 77 M, re 1= aM,w{l) 
77 M ,W \= 0'M,w{'y} 
77 M ,w \= cr]\^i 
77 M' , w' \= 


(Lemma [7j) 
(by assumption) 
(Lemma [8]) 
(Lemma [7|) 


Putting this together with Theorem [5] (modal equivalence for implies bisimilarity), we 
have that two worlds which are modally equivalent in are also modally equivalent in 
and therefore bisimilar. □ 


Theorem 2 (Bisimulation characterisation for L^). Let {M,w), be plausibility mod¬ 

els. Then: 


{M,w)f±{M\w') iff{M,w) 


Proof. From Proposition [6] and Proposition [71 


□ 


4.3 Bisimulation correspondence for safe belief 

We now show bisimulation characterisation results for the logic of degrees of belief . 
Proposition 8. Bisimilarity implies modal equivalence for . 

Proof. Assume Mii±M 2 . Then there is an autobisimulation R' on the disjoint union M 1 UM 2 
with R' n {D{Mi) X ZD (M 2 )) 7 ^ 0. Extend R' into the largest autobisimulation R on Mi U M 2 
(using Proposition [T]). Define Ri = Rn (ZD(Mi) x ZD(Mi)) and R 2 = RCi (ZD(M 2 ) x D{M 2 )). 

Claim. Let i G {1,2} and w G D{Mi). Then 

(i) Ri is the largest autobisimulation on Mi. 

(ii) Mina{[w]R= n [teja) = Mina{[w]R= n [teja). 

(hi) For any n, w n iff tc v. 
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Proof of claim. To prove (i), let Si denote the largest autobisimulation on Mj. If we can 
show Si C Ri we are done. Since Si is an autobisimulation on Mi, it must also be an 
autobisimulation on Mi U M2. Thus, clearly, Si C R, since R is the largest autobisimulation 
on Ml U M2. Hence, since Si C D{Mi) x D{Mi), we get 5 , = H {D{Mi) x D{Mi)) C 
R n {D{Mi) X D{Mi)) = Ri. This shows Si C Ri, as required. 

We now prove (ii). Since w € D{Mi) we get [rcja C D{Mi). Since Ri = Rr\ {D{Mi) x 
D{Mi)) this implies n [w]a = [w'J.Ri H [tc]a. Now note that since R is the largest auto¬ 
bisimulation on Ml U M2 and Ri is the largest autobisimulation on Mj , we have R = R^ and 
Ri = Rf", by Proposition [1] (the largest autobisimulation is an equivalence relation). Hence 
from [icJr fl [rcja = fl [rcja we can conclude n [rcja = [w]r= fl [rcja, and then finally 

Minal[w]R= n [rcja) = Minai[w]R= n [tcja). 

We now prove (hi). Note that if w v or w then w v (by Lemma [2]). So in 
proving w v 4^ w u for rc G D{Mi), we can assume that also v € D{Mi). We then 
get: 

w>^ V 44- Minai[w]R= n [rc]a) >a Mina{[v]R= n [u]a) 

Mina{[w]R= n [w]a) >a Mina{[v]R^ n [v]a) by (h), shice tc, u € T»(Mi) 

W >a' V. 

This completes the proof of the claim. 

We will now show that for all (p and all {wi,W 2 ) G i? D {D{Mi) x D[M 2 )), if Mi,rt;i \= p 
then M 2 ,W 2 ^ <p (the other direction being symmetric). The proof is by induction on the 
syntactic complexity of <p. The propositional and knowledge cases are already covered by 
Proposition m so we only need to consider the case p = □a'fA. Hence assume Mi,wi \= □a'fA 
and {wi,W 2 ) G i? n {D{Mi) x D{M 2 )). We need to prove M 2 ,W 2 \= □aV’- Pick an arbitrary 
V 2 G D{M 2 ) with W 2 Pa V 2 - H we can show M2, U2 |= if, we are done. By (i), R 2 is the largest 
autobisimulation on M2. Hence W 2 Pa V 2 by definition means W 2 >a^ V 2 . Using (iii), we 
can from W 2 >a^ V 2 conclude W 2 >a '^ 2 - Since R is an autobisimulation, we can now apply 
[back>] to {wi,W 2 ) G R and W 2 >a V 2 to get a ui with wi vi and {vi,V 2 ) G R. Using (iii) 
again we can conclude from wi ui to tci vi, since wi G D{Mi). By (i), Ri is the 
largest autobisimulation on Mi, so wi vi is by definition the same as tci Since 

we have assumed Mi,wi ^ □aV'; since wi Pa vi, we get Mi,ui \= if. Since (ui,'(; 2 ) G R, 
the induction hypothesis gives us M 2 ,V 2 \= if, and we are done. □ 

As for the previous logics, the converse also holds, that is, modal equivalence with regard 
to implies bisimulation. This is going to be proved as follows. First we prove that any 
conditional belief formula pc can be translated into a logically equivalent safe belief formula 
ps. This implies that if two pointed models (M, w) and (M', w') are modally equivalent in , 
they must also be modally equivalent in L^: Any formula pc G is true in {M,w) iff its 
translation ps G is true in (M, w) iff ps is true in (M', w') iff pc is true in (M', w'). Now 
we can reason as follows: If two pointed models (M, w) and {M', w') are modally equivalent 
in then they are modally equivalent in and hence, by Theorem[5l bisimilar. This is the 
result we were after. We postpone the full proof until Section 15.11 which is where we provide 
the translation of conditional belief formulas into safe belief formulas (as part of a systematic 
investigation of the relations between the different languages and their relative expressivity). 
Here we only state the result: 

Proposition 9. Modal equivalence for implies bisimilarity. 
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Proof. See Section [5711 


□ 


As for the two previous languages, and we now get the following bisimulation 
characterisation result. 

Theorem 3 (Bisimulation characterisation for L^). Let {M,w), be plausibility mod¬ 

els. Then: 

{M,w)i±{M',w') iff{M,w) 

Proof. From Proposition [8] and Proposition [9l □ 

4.4 Combining characterisation results 

By combining Theorems [H [2] and [3] from the previous subsections we immediately have the 
following result. 

Corollary 1. Bisimilarity corresponds to modal equivalence in the logics of conditional belief, 
degrees of belief, and safe belief, and in any logic containing two or all three of these belief 
modalities; and modal equivalence in one of these logics corresponds to modal equivalence in 
any other. 

For example, we also have that ,w') iff {M,w) or that 

{M,w)i±{M',w') iff {M,w) {M',w'). Also, to be explicit, we now have that 

• {M,w) iff {M,w) {M',w') 

• {M,w) {M',w') iff {M,w) 

• {M,w) iff {M,w) 

In other words, the information content of a pointed plausibility model is equally well de¬ 
scribed in any of these logics. This seems to suggest that it does not matter which logic you 
use to describe the information content of such a model, apart from the usual considerations 
of succinctness. Still, this is not the case: our logics are not equally expressive. This will now 
be addressed in the next section. 

5 Expressivity 

In this section we will determine the expressivity hierarchy of the logics under consideration. 
Abstractly speaking, expressivity is a yardstick for measuring whether two logics are able to 
capture the same properties of a class of models. More concretely in our case, we will for 
instance be interested in determining whether the conditional belief modality can be expressed 
using the degrees of belief modality (observe that the translation in Section 14.21 depends on 
a particular model). With such results at hand we can for instance justify the inclusion or 
exclusion of a modality, and it also sheds light upon the strengths and weaknesses of our 
doxastic notions. To start things off we now formally introduce the notion of expressivity 
found in m- 

Definition 11. Let L and L' be two logical languages interpreted on the same class of models. 


23 


• For (f & L and (p' G L', we say that ip and (p' are equivalent {ip = ip') iff they are true in 
the same pointed models of said class H 

• L' is at least as expressive as L (L ^ L') iff for every ip £ L there is a G L' s.t. 

ip = ip'. 

• L and L' are equally expressive {L = L') iff L ^ L' and L' ^ L. 

• L' is more expressive than L [L < L') iS L ^ L' and L' % L. 

• L and L' are incomparable {L ixi L') \S L % L' and L' % L. 

Below we will show several cases where L % L'] i.e. that L' is not at least as expressive 
as L. Our primary modus operandi (obtained by logically negating L ^ L') will be to show 
that there is a G L, where for any ip' G L' we can find two pointed models (M, w), {M', w') 
such that 


M, w \= ip, M', w' ip and (M, w \= ip' M', w' ^ ip') 

In other words, for some (/? G L, no matter the choice of ip' G L', there will be models which 
ip distinguishes but ip' does not, meaning that ip ^ ip'. 

Our investigation will be concerned with the 7 distinct languages that are obtained by 
considering each such that X is a non-empty subsequence of CDS. In Section l5.ll our 
focus is on safe belief, and in Section [52] on degrees of belief. Using these results, we provide 
in Section 15.31 a full picture of the relative expressivity of each of these logics, for instance 
showing that we can formulate 5 distinct languages up to equal expressivity. We find this 
particularly remarkable in light of the fact that our notion of bisimulation is the right fit for 
all our logics. 

5.1 Expressivity of Safe Belief 

Our first result. Proposition 1101 shows that the conditional belief modality can be expressed 
in terms of the safe belief modality. Similar results can be found elsewhere in the literature, 
for instance in [131 Fact 31] and [7]. In fact, the overall idea of reducing the binary conditional 
belief operator to a unary belief operator goes back to m and [2T] . 

Below we prove that the identity found in |13] is also a valid identity in our logics, which 
is not a given as our semantics differ in essential ways. In particular the semantics of safe 
belief in m is a standard modality for >„, whereas our semantics uses the derived relation 
A more in-depth account of this matter is provided in Section [6] Returning to the matter 
at hand, we point out that our work in Section H) actually serves our investigations here, as 
evident from the crucial role of Proposition 12 in the following proof. 

Proposition 10. Let ip,'ip G Lc- Then the formula Bfip 0 {Ka'ip —>■ Kaifj A □a(V’ t))) 

is valid. 

Proof. We let M = {W,>,V) be any plausibility model with w G W, and further let Pa 
denote the normal plausibility relation for an agent a in M. We will show that M, w \= 
Btip {kai^ -p kaiip A □a(V’ ^ p)))- To this end we let X = MinailtpjM n [rcja). 

®With our usage of = it is clear from context whether we’re referring to modal equivalence, formulas or 
languages. 
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Immediately we have that if X = 0 then no world in [wJq satisfies il>, thus trivially yielding 
both M, w \= B^ip and M, w \= Kaip —)■ Kaiip A □aCV' ~^ ^))- For the remainder we therefore 
assume X is non-empty. We now work under the assumption that M, w \= Ba (f and show 
that this implies M, w \= Kail> —>■ Ka{ip A □a(V’ ^ <^))- 

Claim 1. Let x € X be arbitrarily chosen, then M, x |= A □aCV' ^ ‘C)- 

Proof of claim 1. From x € X we have first that M,x \= A ip and w ~a x. Since 
M, X 1= Ip this means we have proven Claim 1 if M,x \= □a(V’ ^ P) oan be shown. To 
that effect, consider any y £ W s.t. x Pa U, for which we must prove M, y \= fj ^ (p. 
When M, y ^ p this is immediate, and so we may assume M, y \= p. Since x Pa y 
have Mina{[x]ji= n [x]a) >a Mina{[y]R= H [y]a) with R being the largest autobisimulation on 
M. As R is an autobisimulation we have worlds x', y' in M such that (y, y') £ R, x >a x' 
and x' >a y'■ Applying Proposition H] and M,y \= p \i follows that M,y' \= p. Using >„- 
transitivity we have x >a y' and hence w x y', allowing the conclusion that y' £ X. 
By assumption this means M, y' \= p A p, and so applying once more Proposition 0] it follows 
that M, y \= p ^ p thus completing the proof of this claim. 

To show M, w \= Kap -A Ka{p A DaiP ~A p)) we take any x E X, for which we have w x 
by definition of X. Combining this with Claim 1 it follows that M, w \= Ka{p A OaiP ~A p))- 
Consequently this also means that M, w \= Kap -A Ka{p ADa{p -A p)), thus completing the 
proof of this direction. 

For the converse assume now that M, w \= Kap -A Ka{p A\Iia{p ^ p)). As X / 0 there 
is a world u £W s.t. w a u and M, u\= p A \Ba{P -A p). Therefore we have M, u' \= p ^ p 
for dl\ u Pa u'. 

Claim 2. Let x E X be arbitrarily chosen, then M, x \= p. 

Proof of claim 2. Since x E X we have by definition that M, x \= p. It is sufficient to 
prove that u Pa x because this implies M, x \= p ^ p and hence M, x \= p as required. 
To show u Pa X we assume towards a contradiction that u x. Now let R denote the 
largest bisimulation on M and consider any x' £ Mina{[x]R= fl [x]^). As R^ and are both 
reflexive, we have x >a x'. From u x we therefore have a u' £ Mina{{u]rr^ C [tt]a) s.t. 
u' x', u ~a u' and {u,u') £ R (thus also x' >a u'). Since u' ~a u and u ^a w we have 
also u' ~a w, and additionally from x >a x' and x' >a u' we can conclude that x >a u' and 
u' ipa X. Using M,u |= p and {u,u') £ R we apply Proposition 0] which implies M,u' |= p. 
As X E X, u' w and x >a u' it must be the case that u' £ X. Prom u' x we also have 
that X 0 X, but this this contradicts our initial assumption that x E X. We therefore have 
upa X and hence that M, x\= p which completes the proof of the claim. 

Recalling that M,w \= Bfp iff M, x |= p for all x E X, Claim 2 readily shows this 
direction, and thereby completes the proof. □ 

This result shows there is an equivalence-preserving translation from formulas in to 
formulas in , and so we have the following results. 

Corollary 2. For any p £ there is a formula p' £ s.t. p = p'. 

Corollary 3. P and . 

From Corollary [3] we have that any expressivity result for also holds for , and 
similarly for and . In other words, the conditional belief modality is superfluous in 
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terms of expressivity when the safe belief modality is at our disposal. What is more, we can 
now finally give a full proof of Proposition O 

Proof of Proposition{^ Let {M,w) and be plausibility models which are modally 

equivalent in . For any ipc G it follows from Corollary [2] that there is a (^5 G s.t. 
ifc = ^s- Therefore 

_ g 

M, w \= ipc ^ M, w \= (fis M' , w' \= ifs M' , w' \= (pc 

and hence {M,w) {M',w'). Using Proposition [5] we can conclude {M,w)i±{M',w') as 

required. □ 

We now proceed to show that is not at least as expressive as . In doing so we 
need only work with A = {a}, meaning that the result holds even in the single-agent case. 
This is also true for our results in Section 15.21 

Lemma 9 . Let p, q be distinct symbols in P, and let M = (W, >, V) and M' = (IT', >', V') 
denote the two plausibility models presented in Figure\^ Then for P' = P \ {(7} we have that 
{M,W3) =%P {M',wP). 

Proof. We prove the stronger result that for any ip G LpP: 

for each i G {1,2, 3} : (M, Wi \= p) ^ {M', w[ \= p) 

We proceed by induction on p and let i G {1, 2,3}. When 99 is a propositional symbol r in P', 
we have that r / g and so r G V{wi) iff r G V'{w'f), thus completing the base case. Negation 
and conjunction are readily shown using the induction hypothesis. 

For p = Katp we have that M,Wi \= Katp iff M,v \= V' for all v G {wi,W2,W3}, since 
[wi]a = {wi,W 2 ,W 3 }. Applying the induction hypothesis to each element this is equivalent 
to M',v' \= for all v' G tC2, iff M' \= Kap (as [w'f\a = rc^}), which 

completes this case. Continuing to consider p = Bjif we can simplify notation slightly, 
namely Minad'yjM C [rci]a) = Mina[ 7 ]m since [wi]a = IT. The same holds for each world w[ 
of M'. 

Claim 1. For M and M' we have that Wi G MinalylM iff w'i G MinaYl^^M'■ 

Proof of Claim 1. For M we have that >a W 2 and W 2 >a wi, and similarly w'^ >a W 2 and 
W2 >a w[ for M'. Thus the claim follows from the argument below. 

Wi G MinatfjM ^ 

M, Wi \= ^ and there is no j <a i s.t. M, Wj \= 7 
M', w'i \= 'y and there is no j <a i s.t. M', tc' |= 7 77 

w'i G Minal'yjM' 

We now have that M,Wi \= Bf'if iff M,v \= for all v G Minal'jjM- Applying both the 
induction hypothesis and Claim 1, we have that this is equivalent to M,v' |= if for all 
v' G Minal'ylM' iff M',w'i \= Bjif. 

Finally we consider the case oi p = Bffif. To this end we note that the union of {(u;(, tCg)} 
and the identity relation on IT is the largest bisimulation on M' (this relation cannot be 
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M' 



Figure 5: Two single-agent plausibility models and their normal plausibility relations (dashed 
arrows). As usual reflexive arrows are omitted. 


extended and still satify [atoms]). As w'l and are bisimilar, it follows from Corollary [T] 
that M',w[ 1= V’ iff |= V' (*)■ 

Claim 2. For n € N we have that M,w \= ijj for all w € Min^[wi] iff M',w' \= for all 
w' G Min'2[w'^\. 

Proof of Claim 2. We treat three exhaustive cases for n. 

• n = 0: M, rc 1= V' for all re € ^ M,wi \= if 4=^ M', w[ \= if M', w'^ \= if. 

Therefore M,w \= if for all w G Min^[wi] is equivalent to M',w' \= if for all w' G 
tCg}, and as Mirf^fw'jf = this concludes this case. 


n = 1: Since Miri\[wi] = {wi,W 2 } we have that M,w \= if for all w G {rci,tC 2 } 
M',w' \= if for all w' G {w[,W 2 }. Using (*) this is equivalent to M',w' ^ if for all 
w' G {w'i,W 2 jw''^}. By this argument and the fact that Mm\[w'f\ = we 

can conclude M,w \= if for all w G Minl^[wi] M',w' |= if for all w' G Min\[w'j\ as 
required. 

n > 2: We have that Minff\wi\ = {tci, rc2, 1 (^ 3 } and Minff\w'f\ = {w'i,w'2,w'^}, hence this 
is exactly as the case of ip = Kif. 


We have that M,Wi \= Bffif iff M,w |= if for all w G Miri2f[wi]. Applying Claim 2 this is 
equivalent to M',w' \= if for all w' G iff M',w[ \= Bffif, thereby completing the 

final case of the induction step. It follows that {M,w^) =^P as required. □ 


Proposition 11 . 
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Proof. Consider the formula OaP of with p ^ P, and take some arbitrary formula ^pcD G 
As (fcD is finite and P is countably inhnite, there will be some q p not occurring in 
PCD- Letting P' = P \ {q} this means that pcD G L^P■ This choice of p and q can always 
be made, and consequently there also exists models M and M' as given in Figure [3 The 
largest bisimulation on M is the identity as no two worlds have the same valuation. At the 
same time is the largest bisimulation on M'. 

This gives rise to the normal plausibility relations Pa (for M) and P'a (for M') depicted in 
Figure [5] using dashed edges. 

Since tcs Pa W2 and M, W2 |= p it follows that M, W3 \= OaP- Furthermore we have that 
the image of w'^ under P'^ is {w'i,w'^}. This means that there is no v' G W s.t. P'a v' and 
M',v' \= p, and consequently ^ OaP- At the same time we have by Lemma [9] that 

M,W3 \= PCD iff \= PCD- Therefore using the formula OaP of L^, for any formula of 

PCD € there are models which OaP distinguishes but pcD does not, and so OaP ^ PCD- 
Consequently we have as required. □ 

To further elaborate on this result, what is really being put to use here is the ability of the 
safe belief modality to (at least in part) talk about propositional symbols that do not occur in 
a formula. This is an effect of the derived relation Pa depending on the largest bisimulation. 

5.2 Expressivity of Degrees of Belief 

We have now settled that safe belief is at least as expressive as conditional belief, and further 
that the combination of the conditional belief modality and the degrees of belief modality does 
not allow us to express the safe belief modality. A hasty conclusion would be that the safe 
belief modality is the one modality to rule them all, but this is not so. In fact (equivalent 
to cf. Corollary [3]) falls short when it comes to expressing degrees of belief, which we 
now continue to prove. 

Lemma 10. Let p, q be distinct symbols in P, and let M = (W, >, V) and M' = (VF', >', V') 
denote the two plausibility models presented in Figure\^ Then for P' = P \ {( 7 } we have that 
(M,xi) =f„ {M',x')- 

Proof We will show the following stronger version of this lemma: For i G {1, 2} : (M, Xi) =p, 
{M',x') and {M,y) =p, We proceed by induction on p G Lf,,, showing that: 

for i G {1, 2} : M, Xi\= p M', x' \= p and M, y \= p if[ M', y' \= p (1) 

For the base case we have p = r for some r G P\{q}. Because r ^ q it is clear that r G V{xi) 
iff r G V'{x')- Since we also have V{x 2 ) = V'{x') and V'[y) = V{y') this completes the 
base case. The cases of negation and conjunction are readily established using the induction 
hypothesis, and p = Kaif is shown just as we did in the proof of Lemma[9j Before proceeding 
we recall that A = { 0 } and note that for any rc G IF we have [w]a = {xi,X 2 ,y}, as well as 
= {x', y'} for any w' G W. Moreover, the largest bisimulation on M and M' respectively 
is the identity relation, meaning that >a=Pa and >a=Pa- For the case oi p = □aV' we can 
therefore argue as follows. 

M, Xi 1= □aV' M,Xi \= if M', x' \= if PP M', x' \= Dalf 

M, X 2 h foaV' ^ (Vi G {1, 2} :M,Xi^ if) ® M', x' \= if ^ M\ x' ^ Uaif 

M,y^ Half ^ {^w GW ■. M,w^if) ® (Vw' G IF' : M', w' ^ if) ^ M', y' [= Uaif 
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Figure 6: Two single-agent plausibility models and their normal plausibility relations (dashed 
arrows). As usual reflexive arrows are omitted. 


In fact the last line is essentially the case of ATaV’) the image of y under is W (and W 
is the image of y' under This concludes our proof by induction, shows © and allows us 

to conclude that (M,xi) {M',x'). □ 

Proposition 12. %ls. 

Proof. Consider the formula with p ^ P, and additionally take any formula 

(fs € Lp. As ifs is finite and P is countably inhnite, there will be some q ^ p which does 
not occur in ips- With P' = P \ {< 7 } we therefore have ps £ Ap,. As we can always make 
such a choice of p and q, this means that there always exists models (M,xi), {M\x') of the 
form given in Figure [6l 

As in the proof of Lemma [10] the largest bisimulation on M and M' is the identity and 
so Min\[xi]a = {xijX 2 } and Min\[x']a = {x',y'}. Consequently M,xi ^ B^^p whereas 
M',x' ^ B^p. Since ps € Ap, it follows from Lemma [TUI that M, x \= (ps iff M',x' \= ps- 
What this proves is that using the formula B^p of L^, no matter the choice of formula ps 
of there will be models which B^p distinguishes but ps does not, hence B^p ^ ps- From 
this follows as required. □ 

We hnd that this result is quite surprising. Again it is a consequence of our use of the 
largest bisimulation when dehning our semantics. The purpose of xi in model M (which is 
otherwise identical to M') is to inject an additional belief sphere without adding any factual 
content from P', as that could allow the safe belief formula ps to distinguish xi from X 2 . 

At this point it might seem as if all hope was lost for the conditional belief modality, 
however our final direct result somewhat rebuilds the reputation of this hard-pressed modality. 
To this end we define for any A; € N the language which contains every formula of 
for which if B^p occurs then n < k. In other words formulas of talk about belief to at 
most degree k, which comes in handy as we investigate the relative expressive power of 
and . 
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Figure 7; Two single-agent plausibility models. We’ve omitted reflexive arrows and for the 
sake of readability also some transitive arrows. 

Lemma 11. Let fc € N 6e given, and let {M^,wq) and {N^,Wq) denote the two plausibility 
models presented in Figure^ Then we have that (M^, wq) and {N^, Wq) are modally equivalent 
in . 

Proof. We prove a stronger version of this lemma, namely that {M^,Wi) for 

0 < i < A:, (M^x) and (M^y) =“ (A^^y')• 

Key to this proof is the fact that x (resp. y) has the same valuation as x' (resp. y'), and 
that x is more plausible than y whereas y' is more plausible than x'. We proceed by induction 
on . In the base case y? is a propositional symbol, and so as the valuation of each Wi 

matches that of w'^ {0 < i < k), x matches x' and y matches y' this completes the base case. 
The cases of negation and conjunction readily follow using the induction hypothesis, and for 
ip = Kafj the argument is essentially that used in the proof of Lemma 0 

Lastly we consider ip = Biif for any 0 < j < fc, and recall that this is sufficient as (p € Lp^. 
As neither model contains two worlds with the same valuation, the largest autobisimulation 
on either model is the identity, and so both models are normal. With the epistemic relation 
of agent a being total, we have for all tc E VF that Minl^[w]a = {rcoi • • • > wj} and similarly for 
all w' E W that Min^g[w']a = {wq, ■ ■ ■ ,Wj}. We therefore have 

Vtc E W : M^, w t= Vu E {tco,..., Wj} : M^, v \= ip 4^ 

W E {w(), v' Vtc' E W' : , w' ^ B^iP 

as required. Observe that we can apply the induction hypothesis since j < k, and that 
importantly x, y are not in Minl^[w]a, and x', y' are not in Minp[w']a- Thus we have shown 
that {M^,wo) {N^,Wq) thereby completing the proof. □ 

Proposition 13. . 

Proof. Consider now Bir belonging to and any formula ipD ^ ■ Since is finite 

we can choose some A: E N such that (po ^ Because po,... ,pk,q,r are taken from the 

countably infinite set P, no matter the choice of k there exists pointed plausibility models 
and {N^,Wq) as presented in Figure [71 

To determine the truth of B^r in and {N^,Wq) respectively we point out that 

= {x,y} and = {y',x'}. Therefore we have that MinaUqjMk C [tcoja) = 

and MiuailqjNk D [rcgla) = {y'}- Since M^,x ^ r and N^,y' y= r, it follows M^,wq \= B^r 
whereas N^,Wq ^ Blr. By Lemma fTTl we have that M^,wq \= ipo iff ,w'q |= ipo- With 
this we have shown that taking the formula B%r of , there are for any ipn ^ pointed 
plausibility models which B^r distinguishes but ipD does not, thus B^r ^ ipD- It follows that 
L^' % as required. □ 
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Figure 8: Summary of expressivity results for our logics. An arrow X -)• X' indicates that 

is more expressive than . A zig-zag line between X and X' means that and 
are incomparable. The abbreviation {C)DS means both CDS and DS, and similarly for 
C{S) indicating both CS and S. Labels on arrows and zig-zag lines signify from where the 
result is taken in Tabled] 

We have now shown that the degrees of belief modality cannot capture the conditional 
belief modality. What this really showcases is that for Bfip, potentially enables us to talk 
about worlds of arbitrarily large degree. This sets it apart from the degrees of belief modality, 
and causes for instance a difference in expressivity. 

5.3 Mapping Out the Relative Expressive Power 

With the results we have now shown, we are in fact able to determine the relative expressivity 
of all our languages. To this end we make use of the following facts related to expressivity, 
where we let L, L' and V denote logical languages interpreted on the same class of models: 

(a) If L is a sublanguage of L' then L ^ L'. 

(b) If L ^ L' and L' ^ L" then L ^ L" (transitivity). 

(c) li L = L' then L ^ L" iff L' ^ L" (transitivity consequence 1). 

(d) If L ^ L' and L” % L' then V % L (transitivity consequence 2). 

(e) If L ^ L' and L % V then L' % V (transitivity consequence 3). 

Now comes our main result, which shows the relative expressivity between 
conditional belief, the logic of degrees of belief and the logic of safe belief. 

Theorem 4. [xi ixi . 

Proof. See the derivation of (4), (7) and (10) in Tabled] 

Beyond showing the above theorem. Table [1] fully accounts for the relative expressivity 
between L^, L^, and . Finally, using Corollary [3] and property (c) we have 
that any expressivity result for holds for and similarly for and . A more 

pleasing presentation of these results is found in Figure [8] 


the logic of 
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# 

Result 

Inferred from 

(1) 


Corollary O 

(2) 

L® % 

Proposition 1111 

(3) 


LC ^ lCd from (a), % LCd from (2) and applying (d). 

(4) 

<L^ 

LC ^ L® from (1), L® ^ from (3). 

(5) 

% L® 

Proposition 1121 

(6) 


LD ^ lCd from (a), % LCd from (2) and applying (d). 

(7) 

L° coL® 

LC % L® from (5), L® % from (6). 

(8) 


Proposition 1131 

(9) 


LC ^ L® from (1), ^ L^ from (5) and applying (d). 

(10) 


LC ^ L^ from (8), ^ lC from (9). 

(11) 


^ lCd from (a), ^ lC from (9) and applying (e). 

(12) 


LC ^ lCd from (a), LCd ^ 

(13) 

% L° 

LC ^ lCd from (a), LC ^ L^ from (8) and applying (e). 

(14) 


LD ^ ^CD j^CD ^ 

(15) 

% L« 

^ lCd from (a), ^ L® from (5) and applying (e). 

(16) 


LS ^ j^CD (-2), lCd -g L® from (15). 

(17) 

LCDS < J^DS 

LCDS = lDS from Corollary [3] and Definition [TT] 

(18) 

LC ^ lCS 

LC ^ lCds from (a), LCds g lDS from (17) and applying (b). 

(19) 

LDS ^ lC 

LS g lDS from (a), L® ^ from (3) and applying (e). 

(20) 

LC < 

LC g, L^s from (18), % iP from (19). 

(21) 

LDS ^ ld 

L® ^ LDS from (a), L® % LD from (6) and applying (e). 

(22) 

LD ^ j^DS 

LD g LDS from (a), L^® g LD from (21). 

(23) 

LCD ^ ^DS 

LCd g LCDS j^CDS ^ applying (b). 

(24) 

LDS ^ L^ 

LCd g lDS from (23), g L® from (15) and applying (e). 

(25) 

L® < 

L® ^ L^s from (a), L^® g L® from (24). 

(26) 

LCD ^ j^DS 

L® ^ LDS from (a), L® g LCd from (2) and applying (e). 

(27) 

LCD ^ J^DS 

LCd g lDS fj-ojjj (23), LCD ^ ^ds (gg) 


Table 1: Derivation of the relative expressivity of our logics. Each of the references (a), (b), 
(d) and (e) refer to properties stated at the start of Section 15.31 Bold faced numbers are 
illustrated in Figure [HI 

5.4 Reflection on bisimulation characterisation and expressivity 

Our bisimulation characterisation results are: 


{M,w] 


iff 

(M, w) 


Theorem [T] 

{M,w] 

)g±{M',w') 

iff 

(M, w) 


Theorem [2] 

{M,w] 

)±g{M',w') 

iff 

(M, w) 


Theorem jS] 
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In other words, bisimulation corresponds to modal equivalence in all three logics. Our ex¬ 
pressivity results can be summarised as (Theorem [3D 
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The logic of conditional belief is less expressive than the logic of safe belief, the logic of 
conditional belief and the logic of degrees of belief are incomparable, as are the logic of 
degrees of belief and the logic of safe belief. 

Our results on bisimulation characterisation suggest that, in some sense, the three logics 
are the same, whereas our results on expressive power suggest that, in another sense, the three 
logics are different. It is therefore a good moment to explain how to interpret our results. 

The bisimulation characterisation result in Corollary [1] says that the information content 
of a given plausibility model is equally well described in the three logics. Now consider an 
even more specihc case: a hnite model; and consider a characteristic formula of that model 
(these can be shown to exist for plausibility models along the lines of [311155] —where we note 
that we take models, not pointed models). For a model M this gives us, respectively, formulas 
99 ^, and Then the bisimulation characterisation results say that and (pf^ 

are all equivalent. Now a characteristic formula is a very special formula with a unique model 
(modulo bisimilarity). For other formulas that do not have a singleton denotation (again, 
modulo bisimilarity) in the class of plausibility models, this equivalence cannot be achieved. 
That is the expressivity result. For example, given that , there is a safe belief formula 

that is not equivalent to any conditional belief formula. This formula should then describe 
a property that has several non-bisimilar models. It is indeed the case that the formula OaP 
used in the proof of Proposition [11] demonstrating has many models! It is tempting 

to allow ourselves a simplication and to say that the expressivity hierarchy breaks down if we 
restrict ourselves to formulas with unique models^ 

Finally, we must point out that in the publication on single-agent bisimulation [H p. 285], 
we posed the following conjecture: 

In an extended version of the paper we are eonfident that we will prove that the 
logies of eonditional belief and knowledge, of degrees of belief and knowledge, and 
both with the addition of safe belief are all expressively equivalent. 

It therefore seems appropriate to note that we have proved our own confident selves resound¬ 
ingly wrong! 

6 Comparison and applications 

We compare our bisimulation results to those in Demey’s work m. our expressivity results 
to those obtained in Baltag and Smets’ [7], and finally discuss the relevance of our results for 
epistemic planning m- 

^If we consider infinitary versions of the modalities in our logical languages, in other words, common 
knowledge and common belief modalities, we preserve the bisimulation characterisation results (for a more 
refined notion of bisimulation) but it is then to be expected that all three logics become equally expressive 
(oral communication by Tim French). 
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Figure 9: According to Demey’s notion of bisimulation, model Mi (above) with alternating 
-ip and p worlds is a bisimulation contraction. In this particular case i is odd as p does not 
hold at Wi- According to our notion of bisimulation, all p worlds in model Mi are bisimilar 
and also all ^p worlds. Model M 2 (below) is the contraction. 


Bisimulation Prior to our work Demey discussed the model theory of plausibility models in 
great detail in m- Our results add to the valuable original results he obtained. Demey does 
not consider degrees of belief; he considers knowledge, conditional belief and safe belief. Our 
plausibility models are what m refers to as uniform and locally connected epistemic plau¬ 
sibility models; he also considers models with fewer restrictions on the plausibility function. 
But given m Theorem 35], these types of models are for all intents and purposes equivalent 
to ours. The semantics for conditional belief and knowledge are as ours, but his semantics 
for safe belief is different (namely as in [7]). The difference is that in his case an agent safely 
believes if is true in all worlds as least as plausible as the current world, whereas in our 
case it is like that but in the normalised model. This choice of semantics has several highly 
significant implications as we will return to shortly. 

In line with his interpretation of safe belief as a standard modality, Demey’s notion of 
bisimulation for plausibility models is also standard. For example, whereas we require that 

[forth>] If u € IF and w >a v, 3v' G IF such that w' v' and (u, v') € i?, 
where we recall that w v means Mina{[w]R fl [tcja) >a Mina{[v]R fl [uja), he requires that 

[forth>] If u € IF and w >a v, G IF such that w' >a v' and (u, v') G R. 

He obtains correspondence for bisimulation and modal equivalence in the logic of safe belief 
in m Footnote 12 and Theorem 32]. Our notion of bisimulation is less restrictive, as we will 
now illustrate by way of the examples in Figure [9l 

Consider model Mi in Figure El This is a single-agent model on a single proposition p 
containing i worlds, where the image of a world wj under >a is {rci,..., Wj}. The valuation 
is such that if the index of a world is even then p holds, and otherwise p does not hold. Now, 
using Demey’s notion of bisimulation entails that the largest autobisimulation on Mj is the 
identity, and thus Mi is a bisimulation contraction. For example, we can find a formula that 
distinguishes {Mi,Wi) from {Mi^ 2 ,Wi+ 2 )- For safe belief □ we now have Demey’s semantics 
(see above) M, w \= \R\aP iff M, v \= (p ioi all v with w >a v. We now define pQ = T and for 
any natural number n > 1 we let: 


Pn = 


()a{Pn-l Ap) 
<)a{Pn-l A -ip) 


if n is even; 
if n is odd; 


for example 


Pi = 0a(0a(0a(0a(T A -.p) A p) A -.p) A p). 
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We now have that for any i > 1, Mi,Wi \= (pi /\ -■(/jj+i, which makes this a distinguishing 
formula between {Mi,Wi) from (Mi+ 2 , tCi+ 2 ). In fact, the semantics of Da allow us to count 
the number of worlds in Mj. In this sense Demey’s logic is immensely expressive. 

Again referring to Figure El consider M 3 , the model with a most plausible world, a 
less plausible p world and an even less plausible -<p world. In the logic of conditional 
belief wi and W 3 of M 3 are modally equivalent. Hence they also ought to be bisimilar. But 
in Demey’s notion of bisimilarity they are not. Hence we have a mismatch between modal 
equivalence and bisimilarity, which is not supposed to happen: it is possible for two worlds to 
be modally equivalent but not bisimilar. Demey also was aware of this, of course. To remedy 
the problem one can either strengthen the notion of modal equivalence or weaken the notion 
of bisimilarity. Demey chose the former (namely by adding the safe belief modality to the 
conditional belief modality), we chose the latter. Thus we regain the correspondence between 
bisimilarity and modal equivalence. Baltag and Smets [7] achieve the same via a different 
route: they include in the language special propositional symbols, so-called S-propositions. 
The denotation of an S'-proposition can be any subset of the domain. This therefore also 
makes the language much more expressive. 

We believe that in particular for application purposes, weakening the notion of bisimu¬ 
lation, as we have done, is preferable over strengthening the logic, as in mm- This come 
at the price of a more complex bisimulation definition (and, although we did not investigate 
this, surely a higher complexity of determining whether two worlds are bisimilar), but, we 
venture to observe, also a very elegant bisimulation definition given the ingenious use of the 
bisimulation relation itself in the definition of the forth and back conditions of bisimulation. 
We consider this one of the highlights of our work. 

Expressivity In [7] one finds many original expressivity results. Our results copy those, 
but also go beyond. We recall Table[T]for the full picture of our results, and the main results of 
those namely ixi and txi . The first, , is originally found in [TJ 

page 34, Equation 1.7], and we obtained it using the same embedding translation. However, it 
may be worth to point out that in our case this translation still holds for the (in our opinion) 
more proper bisimulation preserving notion of safe belief. Baltag and Smets’ S-propositions 
are arbitrary subsets of the domain, the (unnecessarily) far more expressive notion of safe 
belief. Baltag and Smets also discuss degrees of belief but do not obtain expressivity results 
for that, so tx] may be considered novel and interesting. In artificial intelligence, the 
degrees of belief notion seems more widely in use than the conditional belief notion, so an 
informed reader had better be aware of the incomparability of both logics and may choose 
the logic to suit his or her needs. The result that 1 x 1 could possibly also be considered 
unexpected, and therefore valuable. 

Planning An application area of plausibility models is epistemic planning. A consequence 
of Demey’s notion of bisimulation is that even for single-agent models on a finite set of 
propositions, the set of distinct, contraction-minimal pointed plausibility models is infinite. 
For example, we recall that in Figure [9] any two pointed plausibility models in {(Mi,Wi) \ 
i € N} are non-bisimilar. With our notion of bisimulation, there are in the single-agent case 
only finitely many distinct pointed plausibility models up to bisimulation. This was already 
reported in [3]. Our motivation for this bisimulation investigation was indeed prompted by 
the application of doxastic logics in planning. 
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In planning, an agent attempt to find a sequence of action, a plan, that achieves a given 
goal. A planning problem implicitly represents a state-transition system, where transitions are 
induced by actions. By exploring this state-space we can reason about actions and synthesise 
plans. A growing community investigates planning by applying dynamic epistemic logics 
UniEelll], where actions are epistemic actions. Planning with doxastic modalities has also 
been considered [2]. This is done by identifying states with (pointed) plausibility models, and 
the goal with a formula of the doxastic language. Epistemic actions can be public actions, 
like hard and soft announcements [32], but also non-public actions, such as event models [Tj. 

With the state-space consisting of plausibility models, model theoretic results become 
pivotal when deciding the plan existence problem. Unlike Demey’s approach, our framework 
leads to a finite state-space in the single-agent case and therefore the single-agent plan exis¬ 
tence problem is decidable |10] . At the same time we know that even in a purely epistemic 
setting the multi-agent plan existence problem is undecidable m- But by placing certain 
restrictions on the planning problem it is possible to find decidable fragments even in the 
multi-agent case, for example, event models with propositional preconditions [41j . 
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